AMD Ryzen™ 7000 Series Desktop Processors vulnerabilities

6 vulnerabilities

Known vulnerabilities in AMD Ryzen™ 7000 Series Desktop Processors, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.2CVE-2021-46746amdamd athlon™ 3000 series mobile processors with radeon™ graphics+9
EPSS score
0.15%
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing keys to c006Frrupt the return address, causing a stack-based buffer overrun, potentially leading to a denial of service.
8.2CVE-2022-23829amd1st gen amd epyc™ processors+23
EPSS score
0.20%
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
3.8CVE-2024-36349amdamd athlon™ 3000 series desktop processors with radeon™ graphics+39
EPSS score
0.19%
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.
3.8CVE-2024-36348amdamd athlon™ 3000 series desktop processors with radeon™ graphics+33
EPSS score
0.34%
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage.
7.5CVE-2023-31315amd1st gen amd epyc™ processors+74
EPSS score
0.63%
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
8.3CVE-2023-31364amdamd athlon™ 3000 series mobile processors with radeon™ graphics+22
EPSS score
0.24%
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service.