Advisories · Technology
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics.
Every CVE that names AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.6 Medium
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message,…
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- CWE-208
- CVSS 5.5 Medium
NULL pointer dereference in AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics and others
- AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 4.1 Medium
Integer overflow in AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ 3000 Series Processors
- Memory corruption
- CVSS 5.5 Medium
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading…
- AMD Ryzen™ 5000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1274
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 3.0 Low
Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of…
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- CWE-1284
- CVSS 5.7 Medium
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-1284
- CVSS 2.3 Low
Integer overflow in AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- Memory corruption
- CVSS 8.2 High
Improper input validation in AMD Ryzen™ 3000 Series Desktop Processors and others
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-20
- CVSS 8.2 High
Improper input validation in AMD EPYC™ 7001 Processors and others
- AMD EPYC™ 7001 Processors
- AMD EPYC™ 7002 Processors
- CWE-20
- CVSS 1.9 Low
Incomplete cleanup in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD Ryzen™ 3000 Series Desktop Processors
- CWE-459
- CVSS 3.9 Low
Out-of-bounds read in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- Memory corruption
- CVSS 3.9 Low
Incorrect authorization in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 5.7 Medium
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity…
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVSS 7.2 High
Out-of-bounds write in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Memory corruption
- CVSS 3.4 Low
Improper access control in AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processor
- Broken access control
-
fTPM Voltage Fault Injection
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ PRO 3000 Series Desktop Processors
-
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ PRO 3000 Series Desktop Processors