agentprime: amd-ryzentm-5000-series-mobile-processors-with-radeontm-graphics-cezanneEvery new CVE for amd-ryzentm-5000-series-mobile-processors-with-radeontm-graphics-cezanne.https://agentprime.io/CVE-2023-20596: Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.https://agentprime.io/advisories/CVE-2023-20596/https://agentprime.io/advisories/CVE-2023-20596/Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:55:14 GMTCVECVE-2023-20571: A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.https://agentprime.io/advisories/CVE-2023-20571/https://agentprime.io/advisories/CVE-2023-20571/Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:55:02 GMTCVECVE-2023-20563: Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.https://agentprime.io/advisories/CVE-2023-20563/https://agentprime.io/advisories/CVE-2023-20563/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:54:41 GMTCVECVE-2022-23821: Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.https://agentprime.io/advisories/CVE-2022-23821/https://agentprime.io/advisories/CVE-2022-23821/Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:54:32 GMTCVECVE-2021-46758: Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of avail…https://agentprime.io/advisories/CVE-2021-46758/https://agentprime.io/advisories/CVE-2021-46758/Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:54:25 GMTCVECVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.https://agentprime.io/advisories/CVE-2022-23820/https://agentprime.io/advisories/CVE-2022-23820/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Nov 2023 18:52:21 GMTCVECVE-2023-20594: Uninitialized pointer access in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” and othershttps://agentprime.io/advisories/CVE-2023-20594/https://agentprime.io/advisories/CVE-2023-20594/Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Sep 2023 17:27:59 GMTCVECVE-2023-20555: Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary co…https://agentprime.io/advisories/CVE-2023-20555/https://agentprime.io/advisories/CVE-2023-20555/Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Aug 2023 17:07:24 GMTCVECVE-2021-46794: Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and othershttps://agentprime.io/advisories/CVE-2021-46794/https://agentprime.io/advisories/CVE-2021-46794/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:01:47 GMTCVECVE-2021-46792: Time-of-check time-of-use race condition in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and othershttps://agentprime.io/advisories/CVE-2021-46792/https://agentprime.io/advisories/CVE-2021-46792/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:01:38 GMTCVECVE-2021-46773: Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.https://agentprime.io/advisories/CVE-2021-46773/https://agentprime.io/advisories/CVE-2021-46773/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:01:27 GMTCVECVE-2021-46765: Out-of-bounds read in AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 and othershttps://agentprime.io/advisories/CVE-2021-46765/https://agentprime.io/advisories/CVE-2021-46765/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:01:15 GMTCVECVE-2021-46759: Out-of-bounds write in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and othershttps://agentprime.io/advisories/CVE-2021-46759/https://agentprime.io/advisories/CVE-2021-46759/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:00:53 GMTCVECVE-2021-46756: Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…https://agentprime.io/advisories/CVE-2021-46756/https://agentprime.io/advisories/CVE-2021-46756/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:00:35 GMTCVEcriticalCVE-2021-46755: Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a p…https://agentprime.io/advisories/CVE-2021-46755/https://agentprime.io/advisories/CVE-2021-46755/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:00:26 GMTCVECVE-2021-46754: Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU…https://agentprime.io/advisories/CVE-2021-46754/https://agentprime.io/advisories/CVE-2021-46754/Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:00:16 GMTCVECVE-2021-46753: Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwr…https://agentprime.io/advisories/CVE-2021-46753/https://agentprime.io/advisories/CVE-2021-46753/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 19:00:04 GMTCVEcriticalCVE-2021-46749: Out-of-bounds read in AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” and othershttps://agentprime.io/advisories/CVE-2021-46749/https://agentprime.io/advisories/CVE-2021-46749/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:59:39 GMTCVECVE-2021-26365: Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and othershttps://agentprime.io/advisories/CVE-2021-26365/https://agentprime.io/advisories/CVE-2021-26365/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:58:57 GMTCVECVE-2021-26354: Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and othershttps://agentprime.io/advisories/CVE-2021-26354/https://agentprime.io/advisories/CVE-2021-26354/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:58:37 GMTCVE