Advisories · Technology
AMD Ryzen™ 7000 Series Desktop Processors.
Every CVE that names AMD Ryzen™ 7000 Series Desktop Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
NULL pointer dereference in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 5.6 Medium
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message,…
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- CWE-208
- CVSS 4.6 Medium
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of Memo…
- AMD EPYC™ 4004
- AMD EPYC™ 4005
- Memory corruption
- CVSS 6.9 Medium
Incorrect default permissions in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Broken access control
- CVSS 7.1 High
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the tr…
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- CWE-1304
- CVSS 8.5 High
Incorrect default permissions in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Broken access control
- CVSS 4.6 Medium
Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confident…
- AMD EPYC™ 4004
- AMD EPYC™ 4005
- CWE-1274
- CVSS 5.4 Medium
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory.
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
- CWE-1072
- CVSS 6.3 Medium
Missing authentication in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Authentication bypass
- CVSS 6.0 Medium
Improper privilege management in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Privilege escalation
- CVSS 5.7 Medium
Protection mechanism failure in AMD EPYC™ Series 9004 Processors and others
- AMD EPYC™ Series 9004 Processors
- AMD EPYC™Series 4004 Processors
- CWE-693
- CVSS 7.1 High
Resource exposure in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD EPYC™ 7003 Series Processors
- Information disclosure
- CWE-648
- CVSS 8.3 High
Buffer overflow in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Memory corruption
- CVSS 6.0 Medium
Buffer overflow in AMD EPYC™ 7002 Series Processors and others
- AMD EPYC™ 7002 Series Processors
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.0 High
Integer overflow in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 4.6 Medium
Time-of-check time-of-use race condition in AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- Race condition
- CVSS 7.0 High
Out-of-bounds write in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 5.5 Medium
NULL pointer dereference in AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics and others
- AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.5 High
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of…
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-1231
- CVSS 8.4 High
Untrusted pointer dereference in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 8.8 High
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- CWE-1285
- CVSS 4.4 Medium
Improper array index validation in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-129
- CVSS 7.5 High
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level.
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- CWE-1220
- CVSS 2.5 Low
Out-of-bounds read in AMD Ryzen™ Threadripper™ 3000 Processors and others
- AMD Ryzen™ Threadripper™ 3000 Processors
- AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- Memory corruption
- CVSS 3.2 Low
Incomplete cleanup in AMD EPYC™ 7003 Series Processors and others
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-459
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged bounda…
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421
- CVSS 5.6 Medium
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.
- AMD EPYC™ 7003 Series Processors
- AMD EPYC™ 9004 Series Processors
- CWE-1421
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information…
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 6.4 Medium
Improper signature verification in AMD EPYC™ 7001 Series and others
- AMD EPYC™ 7001 Series
- AMD EPYC™ 7002 Series
- Weak cryptography or TLS
- CVSS 5.5 Medium
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading…
- AMD Ryzen™ 5000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1274
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 3.0 Low
Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of…
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- CWE-1284
- CVSS 5.7 Medium
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-1284
- CVSS 2.3 Low
Integer overflow in AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- Memory corruption
- CVSS 8.2 High
Improper input validation in AMD Ryzen™ 3000 Series Desktop Processors and others
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-20
- CVSS 8.2 High
Improper input validation in AMD EPYC™ 7001 Processors and others
- AMD EPYC™ 7001 Processors
- AMD EPYC™ 7002 Processors
- CWE-20
- CVSS 7.5 High
Time-of-check time-of-use race condition in AMD EPYC™ 7001 Processors and others
- AMD EPYC™ 7001 Processors
- AMD EPYC™ 7002 Processors
- Race condition
- CVSS 1.9 Low
Incomplete cleanup in AMD EPYC™ 9004 Series Processors and others
- AMD EPYC™ 9004 Series Processors
- AMD Ryzen™ 3000 Series Desktop Processors
- CWE-459
- CVSS 5.2 Medium
Buffer overflow in AMD EPYC™ 7001 Processors and others
- AMD EPYC™ 7001 Processors
- AMD EPYC™ 7002 Processors
- Memory corruption
- CVSS 3.9 Low
Incorrect authorization in AMD EPYC™ 7001 Series Processors and others
- AMD EPYC™ 7001 Series Processors
- AMD EPYC™ 7002 Series Processors
- Broken access control
- CVSS 7.5 High
Code injection in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 1st Gen AMD EPYC™ Processors
- Code injection
- CVSS 8.2 High
Improper access control in AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series and others
- AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series
- AMD Ryzen™ 6000 Series Mobile Processors and Workstations
- Broken access control