Advisories · Technology
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5.
Every CVE that names AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- CVSS 3.3 Low
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…
- AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
- AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
- CVSS 7.5 High
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”