Amd Ryzen 7 5800 Firmware vulnerabilities

• amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 more Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM... CVE-2022-23821 9.8 CriticalNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2023-20533 6.1 MediumNovember 14, 2023
• amd 3rd gen amd epyc™ processors, athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +121 more +123 more Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM... CVE-2022-23820 7.5 HighNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2021-46774 6.7 MediumNovember 14, 2023
• amd athlon 3000g, athlon 3015ce firmware, athlon 3015e firmware +136 more +138 more Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory... CVE-2023-20555 7.8 HighAugust 8, 2023
• ryzen™ pro 5000 series desktop processors, amd 4700s firmware, athlon gold 3150c firmware +142 more +144 more fTPM Voltage Fault Injection CVE-2023-20589 6.8 MediumAugust 8, 2023
• ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 more A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the... CVE-2023-20569 Fix available 4.7 MediumAugust 8, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 more A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which... CVE-2021-26371 5.5 MediumMay 9, 2023
• amd 3015ce firmware, 3015e firmware, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +61 more +63 more Certain size values in firmware binary headers could trigger out of bounds reads during signature... CVE-2021-26365 8.2 HighMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 more A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read... CVE-2021-26356 7.4 HighMay 9, 2023
• amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 more Insufficient bounds checking in ASP may allow an attacker to issue a system call from a... CVE-2021-26354 5.5 MediumMay 9, 2023
• amd ryzen 5000 series, ryzen 3 3100 firmware, ryzen 3 3200g firmware +102 more +104 more Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an... CVE-2021-26346 5.5 MediumJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 more Failure to validate the communication buffer and communication service in the BIOS may allow an... CVE-2021-26316 7.8 HighJanuary 10, 2023
• amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded 5000 +108 more +110 more Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds... CVE-2021-26392 7.8 HighNovember 9, 2022
• amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +106 more +108 more Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged... CVE-2020-12930 7.8 HighNovember 9, 2022
• amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +103 more +105 more Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged... CVE-2020-12931 7.8 HighNovember 9, 2022