Advisories · Technology

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”.

Every CVE that names AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-20596 CVE record

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4
- AMD Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael”
Not analysed yet 14 Nov 2023
CVE-2023-20571 CVE record

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
Not analysed yet 14 Nov 2023
CVE-2023-20563 CVE record

CVSS 7.8 High

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
Not analysed yet 14 Nov 2023
CVE-2022-23821 CVE record

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
Not analysed yet 14 Nov 2023
CVE-2021-46758 CVE record

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of avail…
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
Not analysed yet 14 Nov 2023
CVE-2022-23820 CVE record

CVSS 7.5 High

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
Not analysed yet 14 Nov 2023
CVE-2023-20594 CVE record

Uninitialized pointer access in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” and others
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- Memory corruption
Not analysed yet 20 Sept 2023
CVE-2023-20555 CVE record

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary co…
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
Not analysed yet 8 Aug 2023
CVE-2021-46794 CVE record

CVSS 7.5 High

Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-46792 CVE record

CVSS 5.9 Medium

Time-of-check time-of-use race condition in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Race condition
Not analysed yet 9 May 2023
CVE-2021-46773 CVE record

CVSS 8.8 High

Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
Not analysed yet 9 May 2023
CVE-2021-46765 CVE record

CVSS 7.5 High

Out-of-bounds read in AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 and others
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-46759 CVE record

CVSS 6.1 Medium

Out-of-bounds write in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-46756 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
Not analysed yet 9 May 2023
CVE-2021-46755 CVE record

CVSS 7.5 High

Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a p…
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
Not analysed yet 9 May 2023
CVE-2021-46754 CVE record

Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
Not analysed yet 9 May 2023
CVE-2021-46753 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwr…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
Not analysed yet 9 May 2023
CVE-2021-46749 CVE record

CVSS 7.5 High

Out-of-bounds read in AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” and others
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-26365 CVE record

CVSS 8.2 High

Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
Not analysed yet 9 May 2023
CVE-2021-26354 CVE record

CVSS 5.5 Medium

Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- Memory corruption
Not analysed yet 9 May 2023