Latest amd ryzen 5 7600x Vulnerabilities

● CVE-2023-4969

GPU kernel implementations susceptible to memory leak

Apple GPU drivers

Qualcomm GPU drivers

AMD GPU drivers

Imagination GPU drivers

Khronos Opencl<=3.0.11

Khronos Vulkan<=1.3.224

and 259 more

● CVE-2023-20596

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Amd Ryzen 7 5700g Firmware<comboam4v2_1.2.0.b

Amd Ryzen 7 5700g

Amd Ryzen 7 5700ge Firmware<comboam4v2_1.2.0.b

Amd Ryzen 7 5700ge

Amd Ryzen 5 5600g Firmware<comboam4v2_1.2.0.b

Amd Ryzen 5 5600g

and 122 more

● CVE-2023-20571

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.

Microsoft Windows 10<comboam4v2_1.2.0.b

Microsoft Windows 10

Amd Ryzen 3 5300g Firmware<comboam4v2_1.2.0.b

Amd Ryzen 3 5300g

Amd Ryzen 3 5300ge Firmware<comboam4v2_1.2.0.b

Amd Ryzen 3 5300ge

and 138 more

● CVE-2023-20565

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.

Microsoft Windows 10<comboam4v2_1.2.0.b

Microsoft Windows 10

Amd Ryzen 3 5300g Firmware<comboam4v2_1.2.0.b

Amd Ryzen 3 5300g

Amd Ryzen 3 5300ge Firmware<comboam4v2_1.2.0.b

Amd Ryzen 3 5300ge

and 136 more

● CVE-2023-20563

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.

Microsoft Windows 10<comboam4v2_1.2.0.b

Microsoft Windows 10

Amd Ryzen 3 5300g Firmware<comboam4v2_1.2.0.b

Amd Ryzen 3 5300g

Amd Ryzen 3 5300ge Firmware<comboam4v2_1.2.0.b

Amd Ryzen 3 5300ge

and 136 more

● CVE-2023-39281

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.

Insyde InsydeH2O=05.45.24.0039

Intel B760

Intel C262

Intel C266

Intel Core I3-1305u

Intel Core I3-13100

and 283 more

● CVE-2023-20598

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addre...

AMD Radeon Software<23.9.2

Amd Radeon Rx 5300

Amd Radeon Rx 5300 Xt

Amd Radeon Rx 5300m

Amd Radeon Rx 5500

Amd Radeon Rx 5500 Xt

and 102 more

● CVE-2023-44216

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in...

Canonical Ubuntu Linux=22.04

Amd Ryzen 7 4800u

Intel Core I7-10510u

Intel Core I7-12700k

Intel Core I7-8700

Microsoft Windows 11

and 11 more

● CVE-2023-20555

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary cod...

Amd Ryzen 3 3300 Firmware<comboam4_pi_v1_1.0.0.a

Amd Ryzen 3 3300

Amd Ryzen 3 3300x Firmware<comboam4_pi_v1_1.0.0.a

Amd Ryzen 3 3300x

Amd Ryzen 5 3600 Firmware<comboam4_pi_v1_1.0.0.a

Amd Ryzen 5 3600

and 245 more

● CVE-2023-20569

Xen Security Advisory 434 v1 (CVE-2023-20569) - x86/AMD: Speculative Return Stack Overflow

Microsoft Azure Virtual Machines

Fedoraproject Fedora=37

Fedoraproject Fedora=38

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Debian Debian Linux=12.0

and 729 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.