Amd Ryzen 5 5600X vulnerabilities, page 2

37 vulnerabilities

Known vulnerabilities in Amd Ryzen 5 5600X, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2021-26346amdryzen_3_3100_firmware+104
EPSS score
0.22%
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.5.5CVE-2021-26351amdathlon™ series+50
EPSS score
0.21%
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.7.1CVE-2021-26362amdathlon_3050ge_firmware+37
EPSS score
0.22%
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.5.5CVE-2021-26361amdathlon_3050ge_firmware+37
EPSS score
0.24%
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.8.2CVE-2021-26365amdamd_3015ce_firmware+63
EPSS score
0.57%
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.7.5CVE-2021-46774amd1st gen amd epyc™ processors+149
EPSS score
0.51%
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.5.6CVE-2021-46778amdamd processors+179
EPSS score
0.23%
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.7.8CVE-2020-12931amdamd_3015ce_firmware+105
EPSS score
0.27%
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.7.8CVE-2020-12930amdamd_3015ce_firmware+108
EPSS score
0.27%
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.9.8CVE-2022-23821amdamd ryzen™ embedded 5000+131
EPSS score
0.99%
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.9.8CVE-2022-23820amd3rd gen amd epyc™ processors+123
EPSS score
0.70%
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.6.8CVE-2023-20589amd4700s_firmware+143
EPSS score
0.58%
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.7.5CVE-2023-20533amd2nd gen amd epyc™ processors+96
EPSS score
0.50%
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.4.4CVE-2023-20594amd3rd gen amd epyc™ processors+139
EPSS score
0.19%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.5.5CVE-2023-20597amdryzen_3_3100_firmware+110
EPSS score
0.18%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.4.7CVE-2023-20569amd1st gen amd epyc™ processors+338
EPSS score
7.30%
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.7.8CVE-2023-20555amdathlon_3015ce_firmware+133
EPSS score
0.32%
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.