Advisories · Technology
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”.
Every CVE that names AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
-
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of avail…
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
- CVSS 7.5 High
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
-
Uninitialized pointer access in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” and others
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- Memory corruption
-
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary co…
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
-
Sensitive information in error messages in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 and others
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” AM4
- Information disclosure
- CVSS 7.5 High
Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
- CVSS 5.9 Medium
Time-of-check time-of-use race condition in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Race condition
- CVSS 8.8 High
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- CVSS 7.5 High
Out-of-bounds read in AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 and others
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”
- Memory corruption
- CVSS 6.1 Medium
Out-of-bounds write in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the boo…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- CVSS 7.5 High
Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a p…
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
-
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- CVSS 9.1 CriticalCritical · CVSS 9+
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwr…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- CVSS 7.5 High
Out-of-bounds read in AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” and others
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
- Memory corruption
- CVSS 8.2 High
Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
- Memory corruption
- CVSS 5.5 Medium
Buffer overflow in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 and others
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
- Memory corruption