Ryzen Threadripper Pro 3795wx Firmware (Amd) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-11-14. Vendor: Amd.
CVEs of Ryzen Threadripper Pro 3795wx Firmware
- CVE-2021-46774 - CVSS 7.5 (high), 2023-11-14: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially…
- CVE-2023-20594 - CVSS 4.4 (medium), 2023-09-20: Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
- CVE-2023-20597 - CVSS 5.5 (medium), 2023-09-20: Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
- CVE-2023-20559 - CVSS 8.8 (high), 2023-04-02: Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of…
- CVE-2023-20558 - CVSS 8.8 (high), 2023-04-02: Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of…
- CVE-2021-26316 - CVSS 7.8 (high), 2023-01-11: Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM…
- CVE-2022-23824 - CVSS 5.5 (medium), 2022-11-09: IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.
- CVE-2021-46778 - CVSS 5.6 (medium), 2022-08-10: Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that…
- CVE-2022-23825 - CVSS 6.5 (medium), 2022-07-14: Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
- CVE-2022-29900 - CVSS 6.5 (medium), 2022-07-12: Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.
- CVE-2022-23823 - CVSS 6.5 (medium), 2022-06-15: A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable…
