Advisories · Technology
AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4.
Every CVE that names AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
- CVSS 5.9 Medium
Time-of-check time-of-use race condition in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Race condition
- CVSS 8.8 High
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- CVSS 6.1 Medium
Out-of-bounds write in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
-
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- CVSS 9.1 CriticalCritical · CVSS 9+
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwr…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- CVSS 7.5 High
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resul…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- CVSS 5.5 Medium
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- CVSS 8.2 High
Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
- CVSS 5.5 Medium
Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- Memory corruption