Advisories · Technology
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”.
Every CVE that names AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4
- AMD Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael”
-
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
-
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
- CVSS 7.8 High
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
-
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
-
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of avail…
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
- CVSS 7.5 High
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”