RT
Product
Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 2Low 0
Watch
Add Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46773 | 8.8 | May 9 | Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution Affected: various |
| CVE-2021-46794 | 7.5 | May 9 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data… Affected: various |
| CVE-2021-46755 | 7.5 | May 9 | Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub… Affected: various |
| CVE-2021-46749 | 7.5 | May 9 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data… Affected: various |
| CVE-2021-26406 | 7.5 | May 9 | Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host… Affected: various |
| CVE-2021-26356 | 7.4 | May 9 | A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure Affected: various |
Showing 6