CVEs (7)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Amd 101Ryzen 3100 Firmware Ryzen 3300x FirmwareRyzen 3500 Firmware+98 moreJun 17, 2026 Sep 20, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. |
1Amd 125Epyc 7003 Firmware Epyc 72f3 FirmwareEpyc 7313 Firmware+122 moreJun 17, 2026 Sep 20, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. |
1Amd 89Athlon Gold 3150u Firmware Athlon Silver 3050u FirmwareRyzen 3 2200u Firmware+86 moreJun 17, 2026 Apr 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
|
1Amd 89Athlon Gold 3150u Firmware Athlon Silver 3050u FirmwareRyzen 3 2200u Firmware+86 moreJun 17, 2026 Apr 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
|
1Amd 104Ryzen 3 3100 Firmware Ryzen 3 3200g FirmwareRyzen 3 3200u Firmware+101 moreJun 17, 2026 Jan 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. |
1Amd 179Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+176 moreJun 17, 2026 Aug 10, 2022 N/A· v4 5.6 MEDIUM· v3 N/A· v2 Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the content...Show more |
1Amd 52Athlon Gold 3150u Firmware Athlon Silver 3050u FirmwareRyzen 3 2200u Firmware+49 moreJun 17, 2026 Jul 14, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI re...Show more |