Advisories · Technology
AMD Ryzen™ 5000 Series Desktop Processors.
Every CVE that names AMD Ryzen™ 5000 Series Desktop Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
Stack-based buffer overflow in 2nd Gen AMD EPYC™ Processors and others
- 2nd Gen AMD EPYC™ Processors
- 3rd Gen AMD EPYC™ Processors
- Memory corruption
- CVSS 7.7 High
Insufficient verification of data authenticity in AMD Ryzen™ 3000 Series Desktop Processors and others
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-345
- CVSS 5.6 Medium
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message,…
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- CWE-208
- CVSS 1.8 Low
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potential…
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-208
- CVSS 7.1 High
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures lead…
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
- CWE-1220
- CVSS 1.8 Low
Integer overflow in AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 8.6 High
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
- AMD EPYC™ 4005 Series Processors
- AMD EPYC™ 4004 Series Processors
- CWE-1220
- CVSS 6.3 Medium
Missing authentication in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Authentication bypass
- CVSS 6.0 Medium
Improper privilege management in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Privilege escalation
- CVSS 6.0 Medium
Buffer overflow in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.7 High
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 7002 Series Processors
- CWE-1191
- CVSS 7.1 High
Resource allocation without limits in AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors and others
- AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
- AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
- Denial of service
- CVSS 4.8 Medium
Out-of-bounds write in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 4.4 Medium
Improper array index validation in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-129
- CVSS 7.5 High
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-1220
- CVSS 2.5 Low
Out-of-bounds read in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 2.8 Low
Use of uninitialized variable in AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics
- Memory corruption
- CVSS 4.1 Medium
Integer overflow in AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ 3000 Series Processors
- Memory corruption
- CVSS 3.2 Low
Incomplete cleanup in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-459
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged bounda…
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information…
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 6.4 Medium
Improper signature verification in AMD EPYC™ 7001 Series and others
- AMD EPYC™ 7001 Series
- AMD EPYC™ 7002 Series
- Weak cryptography or TLS
- CVSS 5.5 Medium
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading…
- AMD Ryzen™ 5000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1274
- CVSS 5.0 Medium
Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidential…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ PRO W6000 Series Graphics Products
- CWE-1284
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 5.7 Medium
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-1284
- CVSS 8.2 High
Improper input validation in AMD Ryzen™ 3000 Series Desktop Processors and others
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-20
- CVSS 8.2 High
Improper input validation in AMD EPYC™ 7001 Processors and others
- AMD EPYC™ 7001 Processors
- AMD EPYC™ 7002 Processors
- CWE-20
- CVSS 5.7 Medium
Insecure direct object reference in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 1.9 Low
Incomplete cleanup in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD Ryzen™ 3000 Series Desktop Processors
- CWE-459
- CVSS 7.3 High
Improper input validation in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
- Memory corruption
- CWE-20
- CVSS 3.9 Low
Out-of-bounds read in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- Memory corruption
- CVSS 5.2 Medium
Buffer overflow in AMD EPYC™ 7001 Processors and others
- AMD EPYC™ 7001 Processors
- AMD EPYC™ 7002 Processors
- Memory corruption
- CVSS 3.9 Low
Incorrect authorization in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 7.2 High
Out-of-bounds write in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Memory corruption
- CVSS 7.5 High
Code injection in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 1st Gen AMD EPYC™ Processors
- Code injection
- CVSS 8.2 High
Improper access control in AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series and others
- AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series
- AMD Ryzen™ 6000 Series Mobile Processors and Workstations
- Broken access control
-
fTPM Voltage Fault Injection
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ PRO 3000 Series Desktop Processors
-
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ PRO 3000 Series Desktop Processors