Vulnerabilities of AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-20577 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… | 7.4 High | Sep 2, 2026 |
| CVE-2023-20572 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… | 5.6 Medium | Jun 26, 2026 |
| CVE-2025-0009 | A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file… | 5.5 Medium | Sep 6, 2025 |
| CVE-2021-26377 | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious… | 4.1 Medium | Sep 6, 2025 |
| CVE-2024-36357 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache,… | 5.6 Medium | Jul 8, 2025 |
| CVE-2024-36350 | A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores,… | 5.6 Medium | Jul 8, 2025 |
| CVE-2024-36347 | Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator… | 6.4 Medium | Jun 27, 2025 |
| CVE-2024-21971 | Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a… | 5.5 Medium | Feb 12, 2025 |
| CVE-2023-31345 | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading… | 7.5 High | Feb 11, 2025 |
| CVE-2023-20508 | Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory… | 5.0 Medium | Feb 11, 2025 |
| CVE-2023-31343 | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading… | 7.5 High | Feb 11, 2025 |
| CVE-2023-31342 | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading… | 7.5 High | Feb 11, 2025 |
| CVE-2023-31331 | Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver… | 3.0 Low | Feb 11, 2025 |
| CVE-2023-20515 | Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory,… | 5.7 Medium | Feb 11, 2025 |
| CVE-2023-20507 | An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially… | 2.3 Low | Feb 11, 2025 |
| CVE-2024-0179 | SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to… | 8.2 High | Feb 11, 2025 |
| CVE-2024-21925 | Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM,… | 8.2 High | Feb 11, 2025 |
| CVE-2023-20518 | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the… | 1.9 Low | Aug 13, 2024 |
| CVE-2022-23817 | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious… | 7.3 High | Aug 13, 2024 |
| CVE-2021-46772 | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to… | 3.9 Low | Aug 13, 2024 |
| CVE-2021-46746 | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a… | 5.2 Medium | Aug 13, 2024 |
| CVE-2021-26387 | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the… | 3.9 Low | Aug 13, 2024 |
| CVE-2021-26367 | A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an… | 5.7 Medium | Aug 13, 2024 |
| CVE-2021-26344 | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with… | 7.2 High | Aug 13, 2024 |
| CVE-2023-20579 | Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to… | 3.4 Low | Feb 13, 2024 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ 4000 Series Desktop Processors 33