description: Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.
affected:
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD Ryzen™ Embedded R1000
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD Ryzen™ Embedded R2000
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD Ryzen™ Embedded V1000
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD Ryzen™ Embedded V2000
vendor: AMD
versions:
status: affected, version: various
}
