Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductEpyc 9734 Firmware (b424c4e2-c8a5-5050-b517-7f0d91d0f3ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21980 vulnerable 2026-06-08 06:29:33.096129 Details available
HIGH (7.9)
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.
Published: 2024-08-05T16:06:36.216Z
Updated: 2024-08-05T21:00:57.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21978 vulnerable 2026-06-08 06:29:32.982457 Details available
MEDIUM (6)
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.
Published: 2024-08-05T16:05:34.019Z
Updated: 2024-08-05T17:36:02.731Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31355 vulnerable 2026-06-08 06:04:42.977837 Details available
MEDIUM (6)
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
Published: 2024-08-05T16:04:24.813Z
Updated: 2024-08-06T14:58:40.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20591 vulnerable 2026-06-08 05:52:45.382751 Details available
MEDIUM (6.5)
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
Published: 2024-08-13T16:53:23.681Z
Updated: 2025-03-13T16:41:15.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20584 vulnerable 2026-06-08 05:52:45.223913 Details available
MEDIUM (5.3)
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.
Published: 2024-08-13T16:53:18.373Z
Updated: 2024-11-05T21:40:37.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20578 vulnerable 2026-06-08 05:52:45.131753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20569 vulnerable 2026-06-08 05:52:44.912828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20566 vulnerable 2026-06-08 05:52:44.784635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23830 vulnerable 2026-06-08 05:40:59.209615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46774 vulnerable 2026-06-08 05:38:05.555370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46766 vulnerable 2026-06-08 05:38:05.260492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26345 vulnerable 2026-06-08 05:30:43.313222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.