Amd Ryzen 3 3250U vulnerabilities
30 vulnerabilities
Known vulnerabilities in Amd Ryzen 3 3250U, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26376amdathlon™ series+85
EPSS score0.22%
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service.CVE-2021-26392amdamd_3015ce_firmware+110EPSS score0.28%
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.CVE-2021-26384amdathlon_gold_3150u_firmware+53EPSS score0.20%
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.CVE-2021-26354amd2nd gen amd epyc™ processors+169EPSS score0.18%
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.CVE-2021-26388amdathlon™ series+108EPSS score0.22%
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.CVE-2021-26378amdathlon™ series+85EPSS score0.22%
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.CVE-2021-26373amdathlon™ series+89EPSS score0.22%
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service.CVE-2021-26375amdathlon™ series+85EPSS score0.22%
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.CVE-2021-26371amd1st gen amd epyc™ processors+140EPSS score0.19%
A compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which may result in exposure of
ASP memory to userspace, potentially leading to information disclosure.CVE-2021-26346amdryzen_3_3100_firmware+104EPSS score0.21%
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.CVE-2021-26393amdamd_3015ce_firmware+72EPSS score0.27%
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.CVE-2021-26382amdathlon™ series+36EPSS score0.19%
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.CVE-2021-26365amdamd_3015ce_firmware+63EPSS score0.57%
Certain size values in firmware binary headers
could trigger out of bounds reads during signature validation, leading to
denial of service or potentially limited leakage of information about
out-of-bounds memory contents.CVE-2021-46778amdamd processors+179EPSS score0.23%
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.CVE-2020-12931amdamd_3015ce_firmware+105EPSS score0.27%
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.CVE-2020-12930amdamd_3015ce_firmware+108EPSS score0.27%
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.CVE-2022-29900amda10-9600p_firmware+214EPSS score3.94%
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.CVE-2022-27672amd1st gen amd epyc™ processors+274EPSS score0.28%
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target
from the sibling thread after an SMT mode switch potentially resulting in information disclosure.CVE-2022-23815amdamd athlon™ 3000 series desktop processors with radeon™ graphics+16EPSS score0.16%
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.CVE-2022-23823amda10-9600p_firmware+142EPSS score1.17%
A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.