Ryzen 9 4900hs Firmware (Amd) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-08-13. Vendor: Amd.
CVEs of Ryzen 9 4900hs Firmware
- CVE-2022-23817 - CVSS 7.3 (high), 2024-08-13: Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the…
- CVE-2023-4969 - CVSS 6.5 (medium), 2024-01-16: A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on…
- CVE-2022-23820 - CVSS 9.8 (critical), 2023-11-14: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
- CVE-2021-46758 - CVSS 6.1 (medium), 2023-11-14: Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI…
- CVE-2022-23821 - CVSS 9.8 (critical), 2023-11-14: Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
- CVE-2023-20555 - CVSS 7.8 (high), 2023-08-08: Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled…
- CVE-2021-46778 - CVSS 5.6 (medium), 2022-08-10: Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that…
- CVE-2021-26401 - CVSS 5.6 (medium), 2022-03-11: LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.
- CVE-2021-26341 - CVSS 6.5 (medium), 2022-03-11: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.
