Athlon 3150ge Firmware (Amd) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-01-11. Vendor: Amd.

CVEs of Athlon 3150ge Firmware

• CVE-2021-26316 - CVSS 7.8 (high), 2023-01-11: Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM…
• CVE-2021-46778 - CVSS 5.6 (medium), 2022-08-10: Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that…
• CVE-2021-26317 - CVSS 7.8 (high), 2022-05-12: Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.
• CVE-2021-26362 - CVSS 7.1 (high), 2022-05-12: A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management…
• CVE-2021-26361 - CVSS 5.5 (medium), 2022-05-12: A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2…
• CVE-2021-26369 - CVSS 7.8 (high), 2022-05-12: A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
• CVE-2021-26366 - CVSS 7.1 (high), 2022-05-12: An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.
• CVE-2020-12965 - CVSS 7.5 (high), 2022-02-04: When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits…