Advisories · Technology
AMD Ryzen™ 4000 Series Desktop Processors.
Every CVE that names AMD Ryzen™ 4000 Series Desktop Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
NULL pointer dereference in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 5.6 Medium
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message,…
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- CWE-208
- CVSS 7.1 High
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures lead…
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
- CWE-1220
- CVSS 7.3 High
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resu…
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- CWE-1189
- CWE-1220
- CVSS 6.9 Medium
Incorrect default permissions in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Broken access control
- CVSS 7.1 High
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the tr…
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- CWE-1304
- CVSS 1.8 Low
Integer overflow in AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 6.3 Medium
Missing authentication in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Authentication bypass
- CVSS 6.0 Medium
Improper privilege management in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Privilege escalation
- CVSS 6.0 Medium
Buffer overflow in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.0 High
Integer overflow in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 5.4 Medium
Integer overflow in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 1.8 Low
Untrusted pointer dereference in AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.1 High
Resource allocation without limits in AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors and others
- AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
- AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
- Denial of service
- CVSS 4.8 Medium
Out-of-bounds write in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 5.5 Medium
NULL pointer dereference in AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics and others
- AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.5 High
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of…
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-1231
- CVSS 8.4 High
Untrusted pointer dereference in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.8 High
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- CWE-1285
- CVSS 7.5 High
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-1220
- CVSS 2.5 Low
Out-of-bounds read in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 2.8 Low
Use of uninitialized variable in AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics
- Memory corruption
- CVSS 3.0 Low
Integer overflow in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 4.1 Medium
Integer overflow in AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ 3000 Series Processors
- Memory corruption
- CVSS 7.9 High
Out-of-bounds write in AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 4000 Series Desktop Processors
- Memory corruption
- CVSS 6.5 Medium
Incomplete cleanup in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- CWE-459
- CVSS 7.3 High
Improper input validation in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
- Memory corruption
- CWE-20