R3
Product
Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 3Low 0
Watch
Add Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46773 | 8.8 | May 9 | Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution Affected: various |
| CVE-2023-20555 | 7.8 | Aug 8 | Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially… Affected: various |
| CVE-2021-46794 | 7.5 | May 9 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data… Affected: various |
| CVE-2021-46755 | 7.5 | May 9 | Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub… Affected: various |
| CVE-2021-46749 | 7.5 | May 9 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data… Affected: various |
| CVE-2021-26406 | 7.5 | May 9 | Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host… Affected: various |
| CVE-2021-26356 | 7.4 | May 9 | A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure Affected: various |
Showing 7