Description
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Default version status: unaffected
variousaffected
AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
Default version status: unaffected
variousaffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
Default version status: unaffected
variousaffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”
Default version status: unaffected
variousaffected
AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
Default version status: unaffected
variousaffected
AMD Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
Default version status: unaffected
variousaffected
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”
Default version status: unaffected
variousaffected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
Default version status: unaffected
variousaffected
AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded R1000
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded R2000
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded V1000
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded V2000
Default version status: unaffected
variousaffected