Vulnérabilités de AMD AMD Ryzen™ 5000 Series Desktop Processors
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2023-20577 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… | 7.4 Élevée | 2 sept. 2026 |
| CVE-2023-20576 | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially… | 7.7 Élevée | 2 sept. 2026 |
| CVE-2023-20572 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… | 5.6 Moyenne | 26 juin 2026 |
| CVE-2023-20540 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… | 1.8 Faible | 26 juin 2026 |
| CVE-2021-46747 | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… | 7.1 Élevée | 1 juin 2026 |
| CVE-2025-48516 | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… | 6.9 Moyenne | 15 mai 2026 |
| CVE-2021-26380 | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside… | 1.8 Faible | 15 mai 2026 |
| CVE-2024-21962 | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location… | 8.6 Élevée | 15 mai 2026 |
| CVE-2025-0045 | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer… | 6.9 Moyenne | 15 mai 2026 |
| CVE-2026-0432 | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… | 8.5 Élevée | 15 mai 2026 |
| CVE-2025-62619 | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the… | 6.3 Moyenne | 14 mai 2026 |
| CVE-2025-62625 | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download… | 6.0 Moyenne | 14 mai 2026 |
| CVE-2025-54502 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… | 7.1 Élevée | 16 avr. 2026 |
| CVE-2024-21961 | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with… | 6.0 Moyenne | 12 févr. 2026 |
| CVE-2025-52533 | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface… | 8.7 Élevée | 12 févr. 2026 |
| CVE-2021-26381 | Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping… | 7.1 Élevée | 10 févr. 2026 |
| CVE-2025-29949 | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could… | 4.8 Moyenne | 10 févr. 2026 |
| CVE-2024-36355 | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify… | 7.0 Élevée | 10 févr. 2026 |
| CVE-2025-0010 | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting… | 6.1 Moyenne | 6 sept. 2025 |
| CVE-2024-36354 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access,… | 7.5 Élevée | 6 sept. 2025 |
| CVE-2024-21970 | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to… | 4.4 Moyenne | 6 sept. 2025 |
| CVE-2024-21947 | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary… | 7.5 Élevée | 6 sept. 2025 |
| CVE-2023-31330 | An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to… | 2.5 Faible | 6 sept. 2025 |
| CVE-2023-31326 | Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution… | 2.8 Faible | 6 sept. 2025 |
| CVE-2021-26377 | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious… | 4.1 Moyenne | 6 sept. 2025 |
Autres produits AMD
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ 4000 Series Desktop Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 33