Amd Ryzen 5800 vulnerabilities
10 vulnerabilities
Known vulnerabilities in Amd Ryzen 5800, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-46754amdamd ryzen™ embedded r1000+68
EPSS score0.56%
Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.CVE-2021-46759amdathlon_gold_3150g_firmware+64EPSS score0.28%
Improper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an attacker with physical access and
control of a Uapp that runs under the bootloader to reveal the contents of the
ASP (AMD Secure Processor) bootloader accessible memory to a serial port,
resulting in a potential loss of integrity.CVE-2021-46749amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+69EPSS score0.62%
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.CVE-2021-46753amdathlon_gold_3150g_firmware+75EPSS score0.56%
Failure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers may allow an attacker with a
malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite
data structures leading to a potential loss of confidentiality and integrity.CVE-2021-46794amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+69EPSS score0.62%
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.CVE-2021-46792amdathlon_gold_3150g_firmware+62EPSS score0.40%
Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.CVE-2021-46773amd3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt+74EPSS score0.77%
Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.CVE-2021-46765amdryzen_3100_firmware+48EPSS score0.62%
Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.CVE-2023-20594amd3rd gen amd epyc™ processors+139EPSS score0.19%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.CVE-2023-20597amdryzen_3_3100_firmware+110EPSS score0.18%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.