Amd Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics “Cezanne” vulnerabilities
19 vulnerabilities
Known vulnerabilities in Amd Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics “Cezanne”, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26354amd2nd gen amd epyc™ processors+169
EPSS score0.18%
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.CVE-2021-26365amdamd_3015ce_firmware+63EPSS score0.57%
Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.CVE-2021-46758amdamd ryzen™ 5000 series processors with radeon™ graphics “barcelo”+69EPSS score0.33%
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.CVE-2021-46754amdamd ryzen™ embedded r1000+68EPSS score0.56%
Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.CVE-2021-46759amdathlon_gold_3150g_firmware+64EPSS score0.28%
Improper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an attacker with physical access and
control of a Uapp that runs under the bootloader to reveal the contents of the
ASP (AMD Secure Processor) bootloader accessible memory to a serial port,
resulting in a potential loss of integrity.CVE-2021-46756amd1st gen amd epyc™ processors+80EPSS score0.65%
Insufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.CVE-2021-46749amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+69EPSS score0.62%
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.CVE-2021-46753amdathlon_gold_3150g_firmware+75EPSS score0.56%
Failure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers may allow an attacker with a
malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite
data structures leading to a potential loss of confidentiality and integrity.CVE-2021-46794amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+69EPSS score0.62%
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.CVE-2021-46792amdathlon_gold_3150g_firmware+62EPSS score0.40%
Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.CVE-2021-46773amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+74EPSS score0.77%
Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.CVE-2021-46765amdryzen_3100_firmware+48EPSS score0.62%
Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.CVE-2021-46755amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+31EPSS score0.62%
Failure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker
with a malicious bootloader to exhaust the SysHub resources resulting in a
potential denial of service.CVE-2022-23821amdamd ryzen™ embedded 5000+131EPSS score0.99%
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.CVE-2023-20596amdamd ryzen™ 6000 series processors with radeon™ graphics "rembrandt"+70EPSS score1.04%
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.CVE-2023-20594amd3rd gen amd epyc™ processors+139EPSS score0.19%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.CVE-2023-20571amdamd ryzen™ 5000 series processors with radeon™ graphics “barcelo”+78EPSS score0.45%
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.CVE-2023-20555amdathlon_3015ce_firmware+133EPSS score0.32%
Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting
an arbitrary bit in an attacker-controlled pointer potentially leading to
arbitrary code execution in SMM.CVE-2023-20563amdamd ryzen™ embedded 5000+82EPSS score0.20%
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.