Advisories · Technology
AMD Ryzen™ 2000 Series.
Every CVE that names AMD Ryzen™ 2000 Series among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
- AMD Ryzen™ 2000 Series
- AMD Ryzen™ 3000 Series
- CWE-670
- CVSS 8.8 High
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
- AMD Ryzen™ 2000 Series
- AMD Ryzen™ 3000 Series
- CWE-691