Latest amd ryzen 5 5600x Vulnerabilities

● CVE-2022-23821
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Amd Ryzen 9 3900 Firmware=comboam4_pi_1.0.0.9
Amd Ryzen 9 3900 Firmware=comboam4_v2_pi_1.2.0.8
Amd Ryzen 9 3900
Amd Ryzen 9 3900x Firmware=comboam4_pi_1.0.0.9
Amd Ryzen 9 3900x Firmware=comboam4_v2_pi_1.2.0.8
Amd Ryzen 9 3900x
and 230 more
● CVE-2023-20533
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Amd Epyc 7232p Firmware<romepi_1.0.0.d
Amd Epyc 7232p
Amd Epyc 7252 Firmware<romepi_1.0.0.d
Amd Epyc 7252
Amd Epyc 7262 Firmware<romepi_1.0.0.d
Amd Epyc 7262
and 166 more
● CVE-2022-23820
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
Amd Ryzen 9 3900 Firmware=comboam4_pi_1.0.0.9
Amd Ryzen 9 3900 Firmware=comboam4_v2_pi_1.2.0.8
Amd Ryzen 9 3900
Amd Ryzen 9 3900x Firmware=comboam4_pi_1.0.0.9
Amd Ryzen 9 3900x Firmware=comboam4_v2_pi_1.2.0.8
Amd Ryzen 9 3900x
and 224 more
● CVE-2021-46774
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Amd Epyc 7001 Firmware<naplespi_1.0.0.k
Amd Epyc 7001
Amd Epyc 7251 Firmware<naplespi_1.0.0.k
Amd Epyc 7251
Amd Epyc 7261 Firmware<naplespi_1.0.0.k
Amd Epyc 7261
and 268 more
● CVE-2023-20594
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
Amd Epyc 7003 Firmware=milanpi_1.0.0.a
Amd Epyc 7003
Amd Epyc 72f3 Firmware=milanpi_1.0.0.a
Amd Epyc 72f3
Amd Epyc 7313 Firmware=milanpi_1.0.0.a
Amd Epyc 7313
and 332 more
● CVE-2023-20597
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
Amd Ryzen 3 3100 Firmware=comboam4pi_1.0.0.9
Amd Ryzen 3 3100 Firmware=comboam4v2pi_1.2.0.8
Amd Ryzen 3 3100
Amd Ryzen 3 3200g Firmware=comboam4pi_1.0.0.9
Amd Ryzen 3 3200g Firmware=comboam4v2pi_1.2.0.8
Amd Ryzen 3 3200g
and 277 more
● CVE-2023-20555
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary cod...
Amd Ryzen 3 3300 Firmware<comboam4_pi_v1_1.0.0.a
Amd Ryzen 3 3300
Amd Ryzen 3 3300x Firmware<comboam4_pi_v1_1.0.0.a
Amd Ryzen 3 3300x
Amd Ryzen 5 3600 Firmware<comboam4_pi_v1_1.0.0.a
Amd Ryzen 5 3600
and 245 more
● CVE-2023-20589
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially lead...
Amd Ryzen 5 Pro 3400g Firmware
Amd Ryzen 5 Pro 3400g
Amd Ryzen 5 3400g Firmware
Amd Ryzen 5 3400g
Amd Ryzen 5 Pro 3400ge Firmware
Amd Ryzen 5 Pro 3400ge
and 238 more
● CVE-2023-20569
Xen Security Advisory 434 v1 (CVE-2023-20569) - x86/AMD: Speculative Return Stack Overflow
Microsoft Azure Virtual Machines
Fedoraproject Fedora=37
Fedoraproject Fedora=38
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Debian Debian Linux=12.0
and 729 more
● CVE-2021-26356
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.
Amd Epyc 7001 Firmware<naplespi_1.0.0.h
Amd Epyc 7001
Amd Epyc 7251 Firmware<naplespi_1.0.0.h
Amd Epyc 7251
Amd Epyc 7261 Firmware<naplespi_1.0.0.h
Amd Epyc 7261
and 190 more
● CVE-2021-26371
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. ...
Amd Epyc 7773x Firmware<milanpi_1.0.0.6
Amd Epyc 7773x
Amd Epyc 7763 Firmware<milanpi_1.0.0.6
Amd Epyc 7763
Amd Epyc 7713p Firmware<milanpi_1.0.0.6
Amd Epyc 7713p
and 250 more
● CVE-2021-26354
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss...
Amd Epyc 7773x Firmware<milanpi_1.0.0.6
Amd Epyc 7773x
Amd Epyc 7763 Firmware<milanpi_1.0.0.6
Amd Epyc 7763
Amd Epyc 7713p Firmware<milanpi_1.0.0.6
Amd Epyc 7713p
and 298 more
● CVE-2021-26365
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bo...
Amd Ryzen 5 2400g Firmware
Amd Ryzen 5 2400g
Amd Ryzen 5 2400ge Firmware
Amd Ryzen 5 2400ge
Amd Ryzen 3 2200ge Firmware
Amd Ryzen 3 2200ge
and 102 more
● CVE-2021-26316
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code ex...
Amd Epyc 7h12 Firmware<romepi_1.0.0.d
Amd Epyc 7h12
Amd Epyc 7f72 Firmware<romepi_1.0.0.d
Amd Epyc 7f72
Amd Epyc 7f52 Firmware<romepi_1.0.0.d
Amd Epyc 7f52
and 288 more
● CVE-2021-26346
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential ...
Amd Ryzen 3 3100 Firmware
Amd Ryzen 3 3100
Amd Ryzen 3 3200g Firmware
Amd Ryzen 3 3200g
Amd Ryzen 3 3200u Firmware
Amd Ryzen 3 3200u
and 202 more
● CVE-2021-26392
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a...
Amd Enterprise Driver<22.10.20
Amd Radeon Pro Software<22.q2
AMD Radeon Software<22.5.2
Amd Radeon Pro W5500
Amd Radeon Pro W5500x
Amd Radeon Pro W5700
and 498 more
● CVE-2020-12930
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
Amd Enterprise Driver<22.10.20
Amd Radeon Pro Software<22.q2
AMD Radeon Software<22.5.2
Amd Radeon Pro W5500
Amd Radeon Pro W5500x
Amd Radeon Pro W5700
and 432 more
● CVE-2020-12931
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
Amd Enterprise Driver<22.10.20
Amd Radeon Pro Software<22.q2
AMD Radeon Software<22.5.2
Amd Radeon Pro W5500
Amd Radeon Pro W5500x
Amd Radeon Pro W5700
and 424 more
● CVE-2021-46778
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By m...
Amd Athlon 3050ge Firmware
Amd Athlon 3050ge
Amd Athlon 3150g Firmware
Amd Athlon 3150g
Amd Athlon 3150ge Firmware
Amd Athlon 3150ge
and 352 more
● CVE-2021-26368
Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in...
Amd Ryzen 3 2200u Firmware
Amd Ryzen 3 2200u
Amd Ryzen 3 2300u Firmware
Amd Ryzen 3 2300u
Amd Ryzen 3 3100 Firmware
Amd Ryzen 3 3100
and 134 more
● CVE-2021-26363
A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.
AMD Radeon Software
Amd Ryzen 3 3100 Firmware
Amd Ryzen 3 3100
Amd Ryzen 3 3300g Firmware
Amd Ryzen 3 3300g
Amd Ryzen 3 3300x Firmware
and 61 more
● CVE-2021-26317
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.
AMD Radeon Software
Amd Ryzen 3 2200u Firmware
Amd Ryzen 3 2200u
Amd Ryzen 5300g Firmware
Amd Ryzen 5300g
Amd Ryzen 5300ge Firmware
and 141 more
● CVE-2021-26386
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.
Amd Ryzen 3 2200u Firmware
Amd Ryzen 3 2200u
Amd Ryzen 3 2300u Firmware
Amd Ryzen 3 2300u
Amd Ryzen 3 3100 Firmware
Amd Ryzen 3 3100
and 134 more
● CVE-2021-26351
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.
Amd Ryzen 3 3100 Firmware
Amd Ryzen 3 3100
Amd Ryzen 3 3300g Firmware
Amd Ryzen 3 3300g
Amd Ryzen 3 3300x Firmware
Amd Ryzen 3 3300x
and 92 more
● CVE-2021-26362
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of int...
AMD Radeon Software
Amd Ryzen 3 2200u Firmware
Amd Ryzen 3 2200u
Amd Ryzen 3 2300u Firmware
Amd Ryzen 3 2300u
Amd Ryzen 3 5125c Firmware
and 65 more
● CVE-2021-26369
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
AMD Radeon Software
Amd Athlon 3050ge Firmware
Amd Athlon 3050ge
Amd Athlon 3150g Firmware
Amd Athlon 3150g
Amd Athlon 3150ge Firmware
and 93 more
● CVE-2021-26361
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to informa...
AMD Radeon Software
Amd Ryzen 3 2200u Firmware
Amd Ryzen 3 2200u
Amd Ryzen 3 2300u Firmware
Amd Ryzen 3 2300u
Amd Ryzen 3 5125c Firmware
and 65 more
● CVE-2021-26366
An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.
AMD Radeon Software
Amd Athlon 3050ge Firmware
Amd Athlon 3050ge
Amd Athlon 3150g Firmware
Amd Athlon 3150g
Amd Athlon 3150ge Firmware
and 119 more
● CVE-2021-26375
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.
Amd Epyc 7232p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7232p
Amd Epyc 7302p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7302p
Amd Epyc 7402p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7402p
and 198 more
● CVE-2021-26388
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.
Amd Epyc 7232p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7232p
Amd Epyc 7302p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7302p
Amd Epyc 7402p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7402p
and 255 more
● CVE-2021-26376
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service.
Amd Epyc 7232p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7232p
Amd Epyc 7302p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7302p
Amd Epyc 7402p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7402p
and 198 more
● CVE-2021-26378
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.
Amd Epyc 7232p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7232p
Amd Epyc 7302p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7302p
Amd Epyc 7402p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7402p
and 198 more
● CVE-2021-26373
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service.
Amd Epyc 7232p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7232p
Amd Epyc 7302p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7302p
Amd Epyc 7402p Firmware<romepi-sp3_1.0.0.d
Amd Epyc 7402p
and 215 more
● CVE-2021-26352
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.
Amd Ryzen 5 2600 Firmware
Amd Ryzen 5 2600
Amd Ryzen 5 2600x Firmware
Amd Ryzen 5 2600x
Amd Ryzen 5 2700x Firmware
Amd Ryzen 5 2700x
and 54 more
● CVE-2021-26390
A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.
Amd Ryzen 5 2600 Firmware
Amd Ryzen 5 2600
Amd Ryzen 5 2600x Firmware
Amd Ryzen 5 2600x
Amd Ryzen 5 2700x Firmware
Amd Ryzen 5 2700x
and 68 more
● CVE-2021-26336
Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other c...
Amd Epyc 7003 Firmware<milanpi-sp3_1.0.0.4
Amd Epyc 7003
Amd Epyc 7002 Firmware<romepi-sp3_1.0.0.c
Amd Epyc 7002
Amd Epyc 72f3 Firmware<milanpi-sp3_1.0.0.4
Amd Epyc 72f3
and 184 more
● CVE-2021-26337
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests.
Amd Epyc 7003 Firmware<milanpi-sp3_1.0.0.4
Amd Epyc 7003
Amd Epyc 7002 Firmware<romepi-sp3_1.0.0.c
Amd Epyc 7002
Amd Epyc 72f3 Firmware<milanpi-sp3_1.0.0.4
Amd Epyc 72f3
and 218 more
● CVE-2021-26314
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause ...
Xen Xen
Amd Ryzen 5 5600x
Amd Ryzen 7 2700x
Amd Ryzen Threadripper 2990wx
Arm Cortex-a72
Broadcom Bcm2711
and 6 more
● CVE-2021-26313
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrec...
debian/xen
Xen Xen
Amd Ryzen 5 5600x
Amd Ryzen 7 2700x
Amd Ryzen Threadripper 2990wx
Arm Cortex-a72
and 6 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203