description: TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
affected:
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product: Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product:  Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product:  Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product: Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product: 1st Gen AMD EPYC™ Processors
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product: 2nd Gen AMD EPYC™ Processors
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: PI
platforms: x86
product: 3rd Gen AMD EPYC™ Processors
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD EPYC™ Embedded 3000
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD EPYC™ Embedded 7002
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD EPYC™ Embedded 7003
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD Ryzen™ Embedded R1000
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD Ryzen™ Embedded R2000
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
product: AMD Ryzen™ Embedded V1000
vendor: AMD
versions:
status: affected, version: various
}
