Skip to contentAmd Ryzen vulnerabilities
- amd ryzen™ ai software, ryzen ai software +1 moreImproper input validation in the NPU driver could allow an attacker to supply a specially crafted...CVE-2024-219748.8 High
- amd ryzen™ ai software, ryzen ai software +1 moreImproper validation of user input in the NPU driver could allow an attacker to provide a buffer...CVE-2024-219495.5 Medium
- amd ryzen master utility for overclocking control, ryzen master +1 moreIncorrect default permissions in the AMD RyzenTM Master Utility installation directory could...CVE-2024-219467.3 High
- amd ryzen™ master monitoring sdk, ryzen master, ryzen master monitoring software development kit +2 moreIncorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory...CVE-2024-219457.3 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +20 more +22 moreImproper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access...CVE-2024-219815.7 Medium
- amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 moreA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and...CVE-2023-205787.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors +23 more +25 moreIncomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker...CVE-2023-205181.9 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210, instinct™ mi250 +38 more +40 moreInsufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA...CVE-2022-238177.3 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzentm embedded r1000 +23 more +25 moreImproper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write...CVE-2022-238157.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7002 series processors +24 more +26 moreInsufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS...CVE-2021-467723.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +31 more +33 moreLack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE)...CVE-2021-467465.2 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +28 more +30 moreInsufficient access controls in ASP kernel may allow a
privileged attacker with access to AMD...CVE-2021-263873.9 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro w6000 series graphics cards +48 more +50 moreA malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow...CVE-2021-263675.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 moreAn out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow...CVE-2021-263447.2 High
- amd 1st gen amd epyc™ processors, 1st gen amd epyc processors, 2nd gen amd epyc™ processors +65 more +67 moreImproper validation in a model specific register (MSR) could allow a malicious program with ring0...CVE-2023-31315Fix available7.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +23 more +25 moreA potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 ...CVE-2022-238298.2 High
- amd ryzen™ 3000 series processors with radeon™ graphics, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +140 more +142 moreImproper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel...CVE-2023-205796.0 Medium
- amd ryzen™ embedded 5000, ryzen™ embedded v2000, ryzen embedded 5600e firmware +9 more +11 moreInsufficient checking of memory buffer in ASP
Secure OS may allow an attacker with a malicious TA...CVE-2021-467577.8 High
- amd athlon 3000g firmware, instinct mi100 firmware, instinct mi210 firmware +129 more +131 moreGPU kernel implementations susceptible to memory leakCVE-2023-4969Fix available6.5 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7035 series processors with radeon™ graphics “rembrandt-r”, ryzen 3 5125c firmware +68 more +70 moreImproper input validation in the SMM Supervisor may allow an attacker with a compromised SMI...CVE-2023-205969.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreA race condition in System Management Mode (SMM) code may allow an attacker using a compromised...CVE-2023-205718.1 High
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +76 more +78 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...CVE-2023-205657.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +92 more +94 moreInsufficient protections in System Management Mode (SMM) code may allow an attacker to...CVE-2023-205637.8 High
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 moreImproper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM...CVE-2022-238219.8 Critical
- amd ryzen™ 5000 series processors with radeon™ graphics “barcelo”, ryzen™ 6000 series processors with radeon™ graphics "rembrandt", ryzen™ 7030 series mobile processors with radeon™ graphics “barcelo-r” +67 more +69 moreInsufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may...CVE-2021-467586.1 Medium
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2023-205336.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...CVE-2023-205261.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 3rd gen amd epyc™ processors, athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +121 more +123 moreFailure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM...CVE-2022-238207.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium
- amd 4th gen amd epyc™ processors, epyc™ embedded 9003, epyc 9124 firmware +28 more +30 moreImproper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged...CVE-2021-467662.5 Low
- amd radeon rx 5300 xt, radeon software, radeon™ pro w5000 series graphics cards +13 more +15 moreAn improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated...CVE-2023-20598Public exploit7.8 High
- amd ryzen 5 7600x, ryzen 7 4800u, apple m1 mac mini +14 more +16 morePVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software...CVE-2023-442165.3 Medium
- amd epyc™ embedded 7003, ryzen™ embedded 5000, ryzen™ embedded v2000 +112 more +114 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205975.5 Medium
- amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205944.4 Medium
- amd ryzen™ master, ryzen master, ryzen master monitoring sdk +2 moreInsufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™...CVE-2023-205604.4 Medium
- amd ryzen, ryzen™ master, ryzen master +1 more +3 moreInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™...CVE-2023-20564Public exploit6.7 Medium
- amd athlon 3000g, athlon 3015ce firmware, athlon 3015e firmware +136 more +138 moreInsufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory...CVE-2023-205557.8 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon gold pro 3150g firmware +49 more +51 moreSpeculative LeaksCVE-2023-20588Fix availableEPSS 11.2%5.5 Medium
- ryzen™ pro 5000 series desktop processors, amd 4700s firmware, athlon gold 3150c firmware +142 more +144 morefTPM Voltage Fault InjectionCVE-2023-205896.8 Medium
- ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 moreA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...CVE-2023-20569Fix available4.7 Medium
- debian linux, amd 2nd gen amd epyc™ processors, 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt +76 more +78 moreModerate: linux-firmware security updateCVE-2023-20593Public exploitFix available5.5 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in...CVE-2021-467947.5 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious...CVE-2021-467925.9 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 1200 \(af\) firmware +72 more +74 moreInsufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory,...CVE-2021-467738.8 High
- amd ryzen 3100 firmware, ryzen 3300x firmware, ryzen 3500 firmware +46 more +48 moreInsufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out...CVE-2021-467657.5 High
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen 3945wx firmware, ryzen 3955wx firmware +6 more +8 moreA malicious or compromised UApp or ABL can send
a malformed system call to the bootloader, which...CVE-2021-467609.8 Critical
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +62 more +64 moreImproper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an...CVE-2021-467596.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 moreInsufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)...CVE-2021-467569.1 Critical
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 3100 firmware +29 more +31 moreFailure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor)...CVE-2021-467557.5 High
- Show moreLoading…