Skip to contentAmd Ryzen™ Embedded 5000 vulnerabilities
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 9005 series processors +47 more +49 moreInsufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an...CVE-2024-363446.9 Medium
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ 7001 series processors +44 more +46 moreAn out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt...CVE-2024-21963Fix available6.0 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +48 more +50 moreMissing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use...CVE-2024-363094.6 Medium
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +31 more +33 moreA heap overflow in SMM module may allow an attacker with access to a second vulnerability that...CVE-2023-205777.4 High
- amd ryzen™ 3000 series desktop processors, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 5000 series desktop processors +10 more +12 moreInsufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM...CVE-2023-205767.7 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520 +24 more +26 moreInsufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker...CVE-2021-467477.1 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +25 more +27 moreA compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow ...CVE-2021-263801.8 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 moreIncorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could...CVE-2025-545027.1 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +30 more +32 moreImproper handling of direct memory writes in the input-output memory management unit could allow...CVE-2023-313648.3 High
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen™ 3000 series desktop processors +19 more +21 moreImproper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow...CVE-2024-219616.0 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 moreImproper Access Control in an on-chip debug interface could allow a privileged attacker to enable...CVE-2025-525338.7 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520, radeon™ pro v620 +19 more +21 moreImproper system call parameter validation in the Trusted OS may allow a malicious driver to...CVE-2021-263817.1 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "genoa") +32 more +34 moreImproper input validation in the SMM handler could allow an attacker with Ring0 access to write...CVE-2024-363557.0 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +33 more +35 moreImproper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker...CVE-2024-363547.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +22 more +24 moreImproper validation of an array index in the AND power Management Firmware could allow a...CVE-2024-219704.4 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper input validation in the system management mode (SMM) could allow a privileged attacker...CVE-2024-219477.5 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 graphics products, radeon™ pro v520 graphics products +22 more +24 moreInsufficient parameter validation while allocating process space in the Trusted OS (TOS) may...CVE-2021-263774.1 Medium
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +17 more +19 moreIncomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade...CVE-2024-219773.2 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +29 more +31 moreA transient execution vulnerability in some AMD processors may allow a user process to infer the...CVE-2024-363483.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ embedded 3000 series processors +35 more +37 moreA transient execution vulnerability in some AMD processors may allow a user process to infer...CVE-2024-363493.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series +43 more +45 moreImproper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with...CVE-2024-36347Fix available6.4 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors, epyc™ 9004 processors +22 more +24 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313457.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313437.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...CVE-2023-313427.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper access control in the fTPM driver in the trusted OS could allow a privileged attacker to...CVE-2023-205155.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +12 more +14 moreAn integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...CVE-2023-205072.3 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +25 more +27 moreSMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally...CVE-2024-01798.2 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +34 more +36 moreImproper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to...CVE-2024-219258.2 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +20 more +22 moreImproper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access...CVE-2024-219815.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors +23 more +25 moreIncomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker...CVE-2023-205181.9 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210, instinct™ mi250 +38 more +40 moreInsufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA...CVE-2022-238177.3 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors +24 more +26 moreInsufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS...CVE-2021-467723.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +31 more +33 moreLack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE)...CVE-2021-467465.2 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +28 more +30 moreInsufficient access controls in ASP kernel may allow a
privileged attacker with access to AMD...CVE-2021-263873.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 1st gen amd epyc™ processors, 1st gen amd epyc processors, 2nd gen amd epyc™ processors +65 more +67 moreImproper validation in a model specific register (MSR) could allow a malicious program with ring0...CVE-2023-31315Fix available7.5 High
- amd ryzen™ embedded 5000, ryzen™ embedded v2000, ryzen embedded 5600e firmware +9 more +11 moreInsufficient checking of memory buffer in ASP
Secure OS may allow an attacker with a malicious TA...CVE-2021-467577.8 High
- amd epyc™ embedded 7003, ryzen™ embedded 5000, ryzen™ embedded v2000 +112 more +114 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205975.5 Medium
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded 5000 +108 more +110 moreInsufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds...CVE-2021-263927.8 High