Epyc 9754 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductEpyc 9754 Firmware (e6579cd8-02cb-55d5-9450-a994eda748e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21980 vulnerable 2026-06-08 06:29:33.096566 Details available
HIGH (7.9)
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.
Published: 2024-08-05T16:06:36.216Z
Updated: 2024-08-05T21:00:57.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21978 vulnerable 2026-06-08 06:29:32.985615 Details available
MEDIUM (6)
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.
Published: 2024-08-05T16:05:34.019Z
Updated: 2024-08-05T17:36:02.731Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31355 vulnerable 2026-06-08 06:04:42.980438 Details available
MEDIUM (6)
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
Published: 2024-08-05T16:04:24.813Z
Updated: 2024-08-06T14:58:40.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20591 vulnerable 2026-06-08 05:52:45.382820 Details available
MEDIUM (6.5)
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
Published: 2024-08-13T16:53:23.681Z
Updated: 2025-03-13T16:41:15.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20584 vulnerable 2026-06-08 05:52:45.223977 Details available
MEDIUM (5.3)
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.
Published: 2024-08-13T16:53:18.373Z
Updated: 2024-11-05T21:40:37.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20578 vulnerable 2026-06-08 05:52:45.131821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20569 vulnerable 2026-06-08 05:52:44.912936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20566 vulnerable 2026-06-08 05:52:44.782570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23830 vulnerable 2026-06-08 05:40:59.207381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46774 vulnerable 2026-06-08 05:38:05.554973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46766 vulnerable 2026-06-08 05:38:05.254727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26345 vulnerable 2026-06-08 05:30:43.316239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.