Advisories · Technology
AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT.
Every CVE that names AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- CVSS 6.1 Medium
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- CVSS 7.5 High
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- CVSS 6.7 Medium
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
- AMD Ryzen™ 3000 series Desktop Processors “Matisse"
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
-
Uninitialized pointer access in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” and others
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- Memory corruption
-
Uninitialized pointer access in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” and others
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse”
- AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
- Memory corruption