3.4
Low
CVE-2023-20579 Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to…
Description
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7000 Series Desktop Processor | Versions not published | |
| AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7045 Series Mobile Processors | Versions not published |
Show the 5 other branches Hide the 5 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ Embedded V2000 | Versions not published | |
| AMD RyzenTM Embedded V3000 | Versions not published | |
| AMD Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
The 26 CVEs of AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics →
CVE-2025-0045
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer…
6.9
Medium
CVE-2024-36357
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache,…
5.6
Medium
CVE-2024-36350
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores,…
5.6
Medium
CVE-2024-36348
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers…
3.8
Low