amd ryzen_5_5500h_firmware CVE Vulnerabilities (7)

CVEs: 7 CPE versions: View versions table

Summary

This page lists publicly disclosed CVE vulnerabilities affecting amd ryzen_5_5500h_firmware (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.

Showing 17 of 7 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2023-20596 Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution. [email protected] 9.8 0.96% 2023-11-14 2026-06-17
CVE-2023-20571 A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation. [email protected] 8.1 0.45% 2023-11-14 2026-06-17
CVE-2023-20565 Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. [email protected] 7.8 0.20% 2023-11-14 2026-06-17
CVE-2023-20563 Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. [email protected] 7.8 0.20% 2023-11-14 2026-06-17
CVE-2022-23821 Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. [email protected] 9.8 0.99% 2023-11-14 2026-06-17
CVE-2022-23820 Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. [email protected] 7.5 0.70% 2023-11-14 2026-06-17
CVE-2021-46758 Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity. [email protected] 6.1 0.33% 2023-11-14 2026-06-17
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence