Skip to contentAmd Ryzen 5 3500u Firmware vulnerabilities
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzentm embedded r1000 +23 more +25 moreImproper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write...CVE-2022-238157.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro w6000 series graphics cards +48 more +50 moreA malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow...CVE-2021-263675.7 Medium
- amd ryzen™ 3000 series processors with radeon™ graphics, ryzen™ 4000 series desktop processors with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +140 more +142 moreImproper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel...CVE-2023-205796.0 Medium
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 moreImproper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM...CVE-2022-238219.8 Critical
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 3rd gen amd epyc™ processors, athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +121 more +123 moreFailure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM...CVE-2022-238207.5 High
- amd athlon 3000g, athlon 3015ce firmware, athlon 3015e firmware +136 more +138 moreInsufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory...CVE-2023-205557.8 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which...CVE-2021-263715.5 Medium
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a...CVE-2021-263545.5 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors +174 more +176 moreWhen SMT is enabled, certain AMD processors may speculatively execute instructions using a target...CVE-2022-27672Fix available4.7 Medium
- amd ryzen 5000 series, ryzen 3 3100 firmware, ryzen 3 3200g firmware +102 more +104 moreFailure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an...CVE-2021-263465.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded 5000 +108 more +110 moreInsufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds...CVE-2021-263927.8 High
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded r1000 +70 more +72 moreInsufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE)...CVE-2021-263935.5 Medium
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +106 more +108 moreImproper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged...CVE-2020-129307.8 High
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +103 more +105 moreImproper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged...CVE-2020-129317.8 High
- amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 moreExecution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU...CVE-2021-467785.6 Medium
- amd athlon™ series, ryzen 3 3200u firmware, ryzen 3 3250u firmware +34 more +36 moreAn attacker with root account privileges can load any legitimately signed firmware image into the...CVE-2021-263824.4 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 moreA potential vulnerability in some AMD processors using frequency scaling may allow an...CVE-2022-238236.5 Medium
- amd athlon 300u firmware, athlon™ series, ryzen 3 3200u firmware +36 more +38 moreA malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory...CVE-2021-263906.2 Medium