Amd Athlon 3150Ge vulnerabilities

8 vulnerabilities

Known vulnerabilities in Amd Athlon 3150Ge, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-26317amdathlon_3050ge_firmware+75
EPSS score
0.29%
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.
7.8CVE-2021-26369amdathlon_3050ge_firmware+51
EPSS score
0.24%
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
7.8CVE-2021-26316amd1st gen epyc+152
EPSS score
0.26%
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
7.1CVE-2021-26366amdathlon_3050ge_firmware+64
EPSS score
0.24%
An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.
7.1CVE-2021-26362amdathlon_3050ge_firmware+37
EPSS score
0.22%
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.
5.5CVE-2021-26361amdathlon_3050ge_firmware+37
EPSS score
0.24%
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.
5.6CVE-2021-46778amdamd processors+179
EPSS score
0.23%
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
7.5CVE-2020-12965amdall supported processors+63
EPSS score
2.35%
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.