Vulnerabilities of AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-23821 | Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to… | Not rated | Nov 14, 2023 |
| CVE-2021-46758 | Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to… | Not rated | Nov 14, 2023 |
| CVE-2023-20594 | Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via… | Not rated | Sep 20, 2023 |
| CVE-2023-20555 | Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an… | Not rated | Aug 8, 2023 |
| CVE-2023-20593 | An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access… | Not rated | Jul 24, 2023 |
| CVE-2021-46794 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management… | 7.5 High | May 9, 2023 |
| CVE-2021-46792 | Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a… | 5.9 Medium | May 9, 2023 |
| CVE-2021-46773 | Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in… | 8.8 High | May 9, 2023 |
| CVE-2021-46765 | Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads… | 7.5 High | May 9, 2023 |
| CVE-2021-46759 | Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical… | 6.1 Medium | May 9, 2023 |
| CVE-2021-46756 | Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an… | 9.1 Critical | May 9, 2023 |
| CVE-2021-46755 | Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an… | 7.5 High | May 9, 2023 |
| CVE-2021-46754 | Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp… | Not rated | May 9, 2023 |
| CVE-2021-46753 | Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an… | 9.1 Critical | May 9, 2023 |
| CVE-2021-46749 | Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management… | 7.5 High | May 9, 2023 |
| CVE-2021-26365 | Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to… | 8.2 High | May 9, 2023 |
| CVE-2021-26354 | Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may… | 5.5 Medium | May 9, 2023 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ 4000 Series Desktop Processors 33