Advisories · Technology

AMD Ryzen™ Embedded R2000.

Every CVE that names AMD Ryzen™ Embedded R2000 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-36353 CVE record

CVSS 6.5 Medium

Incomplete cleanup in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- CWE-459
Not analysed yet 2 Mar 2025
CVE-2022-23815 CVE record

CVSS 7.5 High

Out-of-bounds write in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics and others
- AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2023-31315 CVE record

CVSS 7.5 High

Code injection in 3rd Gen AMD EPYC™ Processors and others
- 3rd Gen AMD EPYC™ Processors
- 1st Gen AMD EPYC™ Processors
- Code injection
Not analysed yet 9 Aug 2024
CVE-2022-23829 CVE record

CVSS 8.2 High

Improper access control in AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series and others
- AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series
- AMD Ryzen™ 6000 Series Mobile Processors and Workstations
- Broken access control
Not analysed yet 18 Jun 2024
CVE-2023-20563 CVE record

CVSS 7.8 High

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
- AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
Not analysed yet 14 Nov 2023
CVE-2022-23821 CVE record

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
Not analysed yet 14 Nov 2023
CVE-2023-20521 CVE record

CVSS 3.3 Low

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of…
- AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4
- AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”
Not analysed yet 14 Nov 2023
CVE-2021-46754 CVE record

Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU…
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
Not analysed yet 9 May 2023
CVE-2021-26392 CVE record

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading…
- AMD Radeon RX 5000 Series & PRO W5000 Series
- AMD Radeon RX 6000 Series & PRO W6000 Series
Not analysed yet 9 Nov 2022
CVE-2021-26393 CVE record

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poi…
- AMD Radeon RX 5000 Series & PRO W5000 Series
- AMD Radeon RX 6000 Series & PRO W6000 Series
Not analysed yet 9 Nov 2022