AMD EPYC™ Embedded 9005 Series Processors vulnerabilities
6 known vulnerabilities in AMD EPYC™ Embedded 9005 Series Processors from AMD. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Incorrect Default Permissions
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
- 7.0 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Incorrect Default Permissions
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
- 8.5 High severity
AMD EPYC™ 9004 Series Processors: Security-Sensitive Hardware Controls with Missing Lock Bit Protection
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest
- 7.5 High severity
AMD EPYC™ 9004 Series Processors: Exposure of Resource to Wrong Sphere
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
- 8.3 High severity
AMD EPYC™ 7001 Series Processors: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.
- 7.1 High severity
AMD EPYC™ 9004 Series Processors: Improper Access Control for Volatile Memory Containing Boot Code
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.