Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment.Read More ...
Continue Reading
January 11, 2023
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.Read More ...
Continue Reading
January 11, 2023
Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.Read More ...
Continue Reading
January 11, 2023
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.Read More ...
Continue Reading
January 11, 2023
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.Read More ...
Continue Reading
January 11, 2023
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potentia ...
Continue Reading
January 11, 2023
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of ...
Continue Reading
January 11, 2023
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.Read More ...
Continue Reading
January 11, 2023
Back to Main
