Advisories · Technology

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”.

Every CVE that names AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-23821 CVE record

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
Not analysed yet 14 Nov 2023
CVE-2023-20521 CVE record

CVSS 3.3 Low

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…
- AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
- AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
Not analysed yet 14 Nov 2023
CVE-2022-23820 CVE record

CVSS 7.5 High

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
Not analysed yet 14 Nov 2023
CVE-2023-20555 CVE record

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary co…
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
Not analysed yet 8 Aug 2023
CVE-2021-46794 CVE record

CVSS 7.5 High

Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-46759 CVE record

CVSS 6.1 Medium

Out-of-bounds write in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-46756 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
Not analysed yet 9 May 2023
CVE-2021-46754 CVE record

Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
Not analysed yet 9 May 2023
CVE-2021-46753 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwr…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
Not analysed yet 9 May 2023
CVE-2021-46749 CVE record

CVSS 7.5 High

Out-of-bounds read in AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” and others
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-26406 CVE record

CVSS 7.5 High

Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resul…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
Not analysed yet 9 May 2023
CVE-2021-26371 CVE record

CVSS 5.5 Medium

A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
Not analysed yet 9 May 2023
CVE-2021-26365 CVE record

CVSS 8.2 High

Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-26354 CVE record

CVSS 5.5 Medium

Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- Memory corruption
Not analysed yet 9 May 2023