A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
Vendor
AMD
Product
Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
Platforms
x86
Default status
unaffected
Package
AGESA
Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
various
affected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
Vendor
AMD
Product
AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
Platforms
x86
Default status
unaffected
Package
AGESA
AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
various
affected
Unavailable
Unavailable
Unavailable
None listed
3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
Vendor
AMD
Product
3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
Platforms
x86
Default status
unaffected
Package
AGESA
3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
various
affected
Unavailable
Unavailable
Unavailable
None listed
Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
Vendor
AMD
Product
Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
Platforms
x86
Default status
unaffected
Package
AGESA
Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
various
affected
Unavailable
Unavailable
Unavailable
None listed
Ryzen™ Threadripper™ PRO Processors “Chagall” WS
Vendor
AMD
Product
Ryzen™ Threadripper™ PRO Processors “Chagall” WS
Platforms
x86
Default status
unaffected
Package
AGESA
Ryzen™ Threadripper™ PRO Processors “Chagall” WS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
various
affected
Unavailable
Unavailable
Unavailable
None listed
1st Gen AMD EPYC™ Processors
Vendor
AMD
Product
1st Gen AMD EPYC™ Processors
Platforms
x86
Default status
unaffected
Package
AGESA
1st Gen AMD EPYC™ Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
various
affected
Unavailable
Unavailable
Unavailable
None listed
2nd Gen AMD EPYC™ Processors
Vendor
AMD
Product
2nd Gen AMD EPYC™ Processors
Platforms
x86
Default status
unaffected
Package
AGESA
2nd Gen AMD EPYC™ Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
various
affected
Unavailable
Unavailable
Unavailable
None listed
3rd Gen AMD EPYC™ Processors
Vendor
AMD
Product
3rd Gen AMD EPYC™ Processors
Platforms
x86
Default status
unaffected
Package
AGESA
3rd Gen AMD EPYC™ Processors · Scoped product and version facts