Description
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Affected products
- AMD / AMD Ryzen™ Embedded R1000various – various
- AMD / AMD Ryzen™ Embedded R2000various – various
- AMD / AMD Ryzen™ Embedded V1000various – various
- AMD / AMD Ryzen™Embedded V2000various – various
- AMD / Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULPvarious – various
- AMD / Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”various – various
- AMD / Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4various – various
- AMD / Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5various – various
- AMD / Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”various – various
- AMD / Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”various – various
- AMD / Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” AM4various – various
- AMD / Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”various – various
- AMD / Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”various – various