AR
Product
AMD Ryzen™ Embedded R2000 Series Processors
31
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 15Medium 8Low 8
Watch
Add AMD Ryzen™ Embedded R2000 Series Processors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0045 | 6.9 | May 15 | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial… Affected: All versions, or not specified |
| CVE-2025-48521 | 6.9 | May 15 | Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of… Affected: All versions, or not specified |
| CVE-2021-26367 | 6.0 | Aug 13 | A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to… Affected: All versions, or not specified |
| CVE-2024-21981 | 5.7 | Aug 13 | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP… Affected: various |
| CVE-2021-46746 | 5.2 | Aug 13 | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing keys to c006Frrupt the… Affected: All versions, or not specified |
| CVE-2025-29949 | 4.8 | Feb 10 | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure… Affected: All versions, or not specified |
| CVE-2024-21970 | 4.4 | Sep 6 | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity Affected: All versions, or not specified |
| CVE-2021-26377 | 4.1 | Sep 6 | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trigger an integer overflow, leading to a… Affected: All versions, or not specified |
Showing 8
