AMD Athlon™ Series
27 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-26384 | various | A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potent | HIGH 7.8 | 0.2 % | ||
| CVE-2021-26382 | various | An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-26363 | various | A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fen | MEDIUM 4.4 | 0.2 % | ||
| CVE-2021-26386 | various | A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially lea | HIGH 7.8 | 0.3 % | ||
| CVE-2021-26317 | various | Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary | HIGH 7.8 | 0.3 % | ||
| CVE-2021-26368 | various | Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to un | MEDIUM 4.4 | 0.1 % | ||
| CVE-2021-26361 | various | A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory fr | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26362 | various | A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System | HIGH 7.1 | 0.2 % | ||
| CVE-2021-26351 | various | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid D | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26366 | various | An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of syst | HIGH 7.1 | 0.2 % | ||
| CVE-2021-26369 | various | A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bou | HIGH 7.8 | 0.2 % | ||
| CVE-2021-26388 | various | Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memo | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26376 | various | Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resou | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26373 | various | Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of reso | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26378 | various | Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial o | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26375 | various | Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address spa | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26372 | various | Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could re | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26339 | various | A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting i | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-26352 | various | Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space tha | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26390 | various | A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity o | MEDIUM 6.2 | 0.2 % | ||
| CVE-2021-26337 | various | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in | MEDIUM 5.5 | 0.2 % | ||
| CVE-2020-12944 | various | Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution. | HIGH 7.8 | 0.3 % | ||
| CVE-2021-26335 | various | Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlle | HIGH 7.8 | 0.3 % | ||
| CVE-2020-12951 | various | Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations. | HIGH 7.0 | 0.2 % | ||
| CVE-2021-26336 | various | Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and sub | MEDIUM 5.5 | 0.2 % | ||
| CVE-2020-12946 | various | Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service. | HIGH 7.1 | 0.2 % | ||
| CVE-2021-26312 | various | Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory i | MEDIUM 5.5 | 0.2 % |