Known vulnerabilities in AMD Ryzen™ Series
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2021-26384 | A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info… | Not rated | Jul 14, 2022 |
| CVE-2021-26382 | An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor… | Not rated | Jul 14, 2022 |
| CVE-2021-26363 | A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to… | Not rated | May 12, 2022 |
| CVE-2021-26386 | A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2… | Not rated | May 12, 2022 |
| CVE-2021-26317 | Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in… | Not rated | May 12, 2022 |
| CVE-2021-26368 | Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser… | Not rated | May 12, 2022 |
| CVE-2021-26361 | A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate… | Not rated | May 12, 2022 |
| CVE-2021-26362 | A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in… | Not rated | May 12, 2022 |
| CVE-2021-26351 | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access)… | Not rated | May 12, 2022 |
| CVE-2021-26366 | An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM… | Not rated | May 12, 2022 |
| CVE-2021-26369 | A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader,… | Not rated | May 12, 2022 |
| CVE-2021-26388 | Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM,… | Not rated | May 11, 2022 |
| CVE-2021-26376 | Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially… | Not rated | May 11, 2022 |
| CVE-2021-26373 | Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could… | Not rated | May 11, 2022 |
| CVE-2021-26378 | Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that… | Not rated | May 11, 2022 |
| CVE-2021-26375 | Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to… | Not rated | May 11, 2022 |
| CVE-2021-26372 | Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address… | Not rated | May 11, 2022 |
| CVE-2021-26339 | A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU… | Not rated | May 11, 2022 |
| CVE-2021-26352 | Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to… | Not rated | May 10, 2022 |
| CVE-2021-26390 | A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to… | Not rated | May 10, 2022 |
| CVE-2021-26337 | Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM… | Not rated | Nov 16, 2021 |
| CVE-2020-12944 | Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution | Not rated | Nov 16, 2021 |
| CVE-2021-26335 | Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to… | Not rated | Nov 16, 2021 |
| CVE-2020-12951 | Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode)… | Not rated | Nov 16, 2021 |
| CVE-2021-26336 | Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result… | Not rated | Nov 16, 2021 |
Other AMD products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ 4000 Series Desktop Processors 33