Amd Ryzen 3900 Firmware vulnerabilities

• amd epyc™ embedded 7003, ryzen™ embedded 5000, ryzen™ embedded v2000 +112 more +114 more Improper initialization of variables in the DXE driver may allow a privileged user to leak... CVE-2023-20597 5.5 MediumSeptember 20, 2023
• amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 more Improper initialization of variables in the DXE driver may allow a privileged user to leak... CVE-2023-20594 4.4 MediumSeptember 20, 2023
• amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 more Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in... CVE-2021-46794 7.5 HighMay 9, 2023
• amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +60 more +62 more Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious... CVE-2021-46792 5.9 MediumMay 9, 2023
• amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 1200 \(af\) firmware +72 more +74 more Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory,... CVE-2021-46773 8.8 HighMay 9, 2023
• amd ryzen 3100 firmware, ryzen 3300x firmware, ryzen 3500 firmware +46 more +48 more Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out... CVE-2021-46765 7.5 HighMay 9, 2023
• amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +62 more +64 more Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an... CVE-2021-46759 6.1 MediumMay 9, 2023
• amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 3100 firmware +29 more +31 more Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor)... CVE-2021-46755 7.5 HighMay 9, 2023
• amd ryzen™ embedded r1000, ryzen™ embedded r2000, ryzen™ embedded v1000 +66 more +68 more Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker... CVE-2021-46754 9.1 CriticalMay 9, 2023
• amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +73 more +75 more Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers... CVE-2021-46753 9.1 CriticalMay 9, 2023
• amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 more Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in... CVE-2021-46749 7.5 HighMay 9, 2023