Ryzen 5 5700ge Firmware

ryzen_5_5700ge_firmware

Vendor: Amd • 16 CVEs

CVEs (16)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-20597 1Amd 101Ryzen 3100 Firmware Ryzen 3300x FirmwareRyzen 3500 Firmware+98 more Jun 17, 2026 Sep 20, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
CVE-2023-20594 1Amd 125Epyc 7003 Firmware Epyc 72f3 FirmwareEpyc 7313 Firmware+122 more Jun 17, 2026 Sep 20, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
CVE-2021-26346 1Amd 104Ryzen 3 3100 Firmware Ryzen 3 3200g FirmwareRyzen 3 3200u Firmware+101 more Jun 17, 2026 Jan 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
CVE-2021-26316 1Amd 147Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+144 more Jun 17, 2026 Jan 11, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
CVE-2021-46778 1Amd 179Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+176 more Jun 17, 2026 Aug 10, 2022 N/A· v4 5.6 MEDIUM· v3 N/A· v2 Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the content...Show more Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.Show less
CVE-2021-26386 1Amd 70Ryzen 3 2200u Firmware Ryzen 3 2300u FirmwareRyzen 3 3100 Firmware+67 more Jun 17, 2026 May 12, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.
CVE-2021-26368 1Amd 70Ryzen 3 2200u Firmware Ryzen 3 2300u FirmwareRyzen 3 3100 Firmware+67 more Jun 17, 2026 May 12, 2022 N/A· v4 4.4 MEDIUM· v3 4.9 MEDIUM· v2 Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service...Show more Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.Show less
CVE-2021-26363 1Amd 34Radeon Software Ryzen 3 3100 FirmwareRyzen 3 3300g Firmware+31 more Jun 17, 2026 May 12, 2022 N/A· v4 4.4 MEDIUM· v3 3.6 LOW· v2 A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.
CVE-2021-26317 1Amd 74Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+71 more Jun 17, 2026 May 12, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.
CVE-2021-26369 1Amd 50Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+47 more Jun 17, 2026 May 12, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses.
CVE-2021-26366 1Amd 63Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+60 more Jun 17, 2026 May 12, 2022 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.
CVE-2021-26362 1Amd 36Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+33 more Jun 17, 2026 May 12, 2022 N/A· v4 7.1 HIGH· v3 6.6 MEDIUM· v2 A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availabil...Show more A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.Show less
CVE-2021-26361 1Amd 36Athlon 3050ge Firmware Athlon 3150g FirmwareAthlon 3150ge Firmware+33 more Jun 17, 2026 May 12, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentially leading to information disclosure.
CVE-2021-26351 1Amd 49Ryzen 3 3100 Firmware Ryzen 3 3300g FirmwareRyzen 3 3300x Firmware+46 more Jun 17, 2026 May 12, 2022 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.
CVE-2021-26339 1Amd 84Epyc 72f3 Firmware Epyc 7313 FirmwareEpyc 7313p Firmware+81 more Jun 17, 2026 May 11, 2022 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a speci...Show more A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.Show less
CVE-2021-26336 1Amd 95Epyc 7002 Firmware Epyc 7003 FirmwareEpyc 7232p Firmware+92 more Jun 17, 2026 Nov 16, 2021 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components.