GCVE - cpe:2.3:o:amd:amd_3015ce_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:amd_3015ce_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Amd 3015Ce Firmware (`2047a31a-602d-5231-a44c-9facaf6432c6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20521`	vulnerable	2026-06-08 05:52:43.353953	Details available LOW (3.3) TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service. Published: 2023-11-14T18:52:31.662Z Updated: 2024-08-02T09:05:36.873Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26371`	vulnerable	2026-06-08 05:30:43.854306	Details available A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. Published: 2023-05-09T18:59:16.122Z Updated: 2025-01-28T15:46:02.389Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26365`	vulnerable	2026-06-08 05:30:43.722973	Details available Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents. Published: 2023-05-09T18:58:57.236Z Updated: 2025-01-28T15:47:24.862Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26354`	vulnerable	2026-06-08 05:30:43.580899	Details available Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity. Published: 2023-05-09T18:58:37.664Z Updated: 2025-01-28T15:50:35.057Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.