Skip to contentAmd Ryzen Threadripper 2990wx Firmware vulnerabilities
- amd ryzen™ embedded 5000, ryzen™ embedded r1000, ryzen™ embedded r2000 +129 more +131 moreImproper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM...CVE-2022-238219.8 Critical
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 moreInsufficient input validation in the ASP Bootloader may enable a privileged attacker with...CVE-2023-205261.9 Low
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 moreTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM...CVE-2023-205213.3 Low
- amd 3rd gen amd epyc™ processors, athlon™ 3000 series desktop processors with radeon™ graphics “picasso” am4, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +121 more +123 moreFailure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM...CVE-2022-238207.5 High
- ryzen™ pro 5000 series desktop processors, amd 4700s firmware, athlon gold 3150c firmware +142 more +144 morefTPM Voltage Fault InjectionCVE-2023-205896.8 Medium
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an
attacker to issue a system call from a...CVE-2021-263545.5 Medium
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 moreInsufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper...CVE-2023-205588.8 High
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 moreInsufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to...CVE-2023-205598.8 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors +174 more +176 moreWhen SMT is enabled, certain AMD processors may speculatively execute instructions using a target...CVE-2022-27672Fix available4.7 Medium
- amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +150 more +152 moreFailure to validate the communication buffer and communication service in the BIOS may allow an...CVE-2021-263167.8 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 moreExecution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU...CVE-2021-467785.6 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 moreAliases in the branch predictor may cause some AMD processors to predict the wrong branch type...CVE-2022-23825Fix available6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 moreA potential vulnerability in some AMD processors using frequency scaling may allow an...CVE-2022-238236.5 Medium
- amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 moreA malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system...CVE-2021-263867.8 High
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +73 more +75 moreFailure to verify the protocol in SMM may allow an attacker to control the protocol and modify...CVE-2021-263177.8 High
- amd athlon™ series, ryzen 3 2200u firmware, ryzen 3 2300u firmware +69 more +71 moreInsufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges...CVE-2021-263684.4 Medium
- amd athlon™ series, ryzen 3 3100 firmware, ryzen 3 3300g firmware +48 more +50 moreInsufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct...CVE-2021-263515.5 Medium
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +62 more +64 moreAn attacker, who gained elevated privileges via some other vulnerability, may be able to read...CVE-2021-263667.1 High
- amd athlon 3050ge firmware, athlon 3150g firmware, athlon 3150ge firmware +49 more +51 moreA malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call...CVE-2021-263697.8 High
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +106 more +108 moreImproper validation of the BIOS directory may allow for searches to read beyond the directory...CVE-2021-263885.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling...CVE-2021-263765.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +87 more +89 moreInsufficient bound checks in the System Management Unit (SMU) may result in a system voltage...CVE-2021-263735.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient bound checks in the System Management Unit (SMU) may result in access to an invalid...CVE-2021-263785.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in...CVE-2021-263755.5 Medium
- amd athlon™ series, ryzen 3 5300g firmware, ryzen 3 5300ge firmware +29 more +31 moreInsufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in...CVE-2021-263525.5 Medium
- amd athlon 300u firmware, athlon™ series, ryzen 3 3200u firmware +36 more +38 moreA malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory...CVE-2021-263906.2 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreSome AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially...CVE-2021-263416.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreLFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.CVE-2021-26401Fix available5.6 Medium
- amd all supported processors, athlon 3050ge firmware, athlon 3150g firmware +61 more +63 moreWhen combined with specific software sequences, AMD CPUs may transiently execute non-canonical...CVE-2020-129657.5 High
- amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +111 more +113 moreInsufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read...CVE-2021-263375.5 Medium
- amd athlon™ series, epyc 7002 firmware, epyc 7003 firmware +94 more +96 moreInsufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses...CVE-2021-263365.5 Medium