Description
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Default version status: unaffected
variousaffected
AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
Default version status: unaffected
variousaffected
AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
Default version status: unaffected
variousaffected
AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
Default version status: unaffected
variousaffected
AMD Ryzen™ Threadripper™ PRO Processors “Chagall” WS
Default version status: unaffected
variousaffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
Default version status: unaffected
variousaffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”
Default version status: unaffected
variousaffected
AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
Default version status: unaffected
variousaffected
AMD Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
Default version status: unaffected
variousaffected
AMD 1st Gen AMD EPYC™ Processors
Default version status: unaffected
variousaffected
AMD 2nd Gen AMD EPYC™ Processors
Default version status: unaffected
variousaffected
AMD 3rd Gen AMD EPYC™ Processors
Default version status: unaffected
variousaffected