Description
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
Default version status: unaffected
variousaffected
AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
Default version status: unaffected
variousaffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5
Default version status: unaffected
variousaffected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”
Default version status: unaffected
variousaffected
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5
Default version status: unaffected
variousaffected
AMD 1st Gen AMD EPYC™ Processors
Default version status: unaffected
variousaffected
AMD 2nd Gen AMD EPYC™ Processors
Default version status: unaffected
variousaffected
AMD 3rd Gen AMD EPYC™ Processors
Default version status: unaffected
variousaffected
AMD AMD EPYC™ Embedded 3000
Default version status: unaffected
variousaffected
AMD AMD EPYC™ Embedded 7002
Default version status: unaffected
variousaffected
AMD AMD EPYC™ Embedded 7003
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded R1000
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded R2000
Default version status: unaffected
variousaffected
AMD AMD Ryzen™ Embedded V1000
Default version status: unaffected
variousaffected