Skip to contentAmd Ryzen 5950x Firmware vulnerabilities
- amd epyc™ embedded 7003, ryzen™ embedded 5000, ryzen™ embedded v2000 +112 more +114 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205975.5 Medium
- amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...CVE-2023-205944.4 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in...CVE-2021-467947.5 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious...CVE-2021-467925.9 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 1200 \(af\) firmware +72 more +74 moreInsufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory,...CVE-2021-467738.8 High
- amd ryzen 3100 firmware, ryzen 3300x firmware, ryzen 3500 firmware +46 more +48 moreInsufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out...CVE-2021-467657.5 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +62 more +64 moreImproper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an...CVE-2021-467596.1 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 3100 firmware +29 more +31 moreFailure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor)...CVE-2021-467557.5 High
- amd ryzen™ embedded r1000, ryzen™ embedded r2000, ryzen™ embedded v1000 +66 more +68 moreInsufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker...CVE-2021-467549.1 Critical
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +73 more +75 moreFailure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers...CVE-2021-467539.1 Critical
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in...CVE-2021-467497.5 High
- amd genoa firmware, hygon 1 firmware, hygon 2 firmware +36 more +38 moreIncorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM...CVE-2022-292778.8 High
- amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 moreA malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system...CVE-2021-263867.8 High
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +73 more +75 moreFailure to verify the protocol in SMM may allow an attacker to control the protocol and modify...CVE-2021-263177.8 High
- amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 moreInsufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges...CVE-2021-263684.4 Medium
- amd all supported processors, athlon 3050ge firmware, athlon 3150g firmware +61 more +63 moreWhen combined with specific software sequences, AMD CPUs may transiently execute non-canonical...CVE-2020-129657.5 High
- amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +111 more +113 moreInsufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read...CVE-2021-263375.5 Medium