Skip to contentAmd Ryzen 9 5900 Firmware vulnerabilities
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 moreImproper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM...CVE-2022-238219.8 Critical
- amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, epyc™ embedded 7002 +94 more +96 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2023-205336.1 Medium
- amd 3rd gen amd epyc™ processors, athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +121 more +123 moreFailure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM...CVE-2022-238207.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 moreInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to...CVE-2021-467746.7 Medium
- amd athlon 3000g, athlon 3015ce firmware, athlon 3015e firmware +136 more +138 moreInsufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory...CVE-2023-205557.8 High
- ryzen™ pro 5000 series desktop processors, amd 4700s firmware, athlon gold 3150c firmware +142 more +144 morefTPM Voltage Fault InjectionCVE-2023-205896.8 Medium
- ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 moreA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...CVE-2023-20569Fix available4.7 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which...CVE-2021-263715.5 Medium
- amd 3015ce firmware, 3015e firmware, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +61 more +63 moreCertain size values in firmware binary headers
could trigger out of bounds reads during signature...CVE-2021-263658.2 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 moreA TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read...CVE-2021-263567.4 High
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a...CVE-2021-263545.5 Medium
- amd ryzen 5000 series, ryzen 3 3100 firmware, ryzen 3 3200g firmware +102 more +104 moreFailure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an...CVE-2021-263465.5 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 moreFailure to validate the communication buffer and communication service in the BIOS may allow an...CVE-2021-263167.8 High
- amd radeon rx 5000 series & pro w5000 series, radeon rx 6000 series & pro w6000 series, ryzen™ embedded 5000 +108 more +110 moreInsufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds...CVE-2021-263927.8 High
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +106 more +108 moreImproper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged...CVE-2020-129307.8 High
- amd radeon rx 5000 series & pro w5000 series, ryzen(tm) embedded 5000, ryzen(tm) embedded r1000 +103 more +105 moreImproper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged...CVE-2020-129317.8 High