Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

amd ryzen 7 4700u firmware vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3

CVE-2023-4969

A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures.
Khronos VulkanKhronos OpenclImaginationtech DdkAmd Instinct Mi300x Firmware -Amd Instinct Mi300a Firmware -Amd Instinct Mi250 Firmware -Amd Instinct Mi210 Firmware -Amd Instinct Mi100 Firmware -Amd Radeon Instinct Mi50 Firmware -Amd Radeon Instinct Mi25 Firmware -Amd Radeon Pro V620 Firmware -Amd Radeon Pro V520 Firmware -Amd Radeon Pro W7600 Firmware -Amd Radeon Pro W7500 Firmware -Amd Radeon Pro W6400 Firmware -Amd Radeon Pro W6500m Firmware -Amd Radeon Pro W6300m Firmware -Amd Radeon Pro W5700x Firmware -Amd Radeon Pro W5500x Firmware -Amd Radeon Rx 7900xtx Firmware -Amd Radeon Rx 7900xt Firmware -Amd Radeon Rx 7800xt Firmware -
6.1
CVSSv3

CVE-2021-46758

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an malicious user to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
Amd Ryzen 7 5700g FirmwareAmd Ryzen 7 5700ge FirmwareAmd Ryzen 5 5600g FirmwareAmd Ryzen 5 5600ge FirmwareAmd Ryzen 3 5300g FirmwareAmd Ryzen 3 5300ge FirmwareAmd Ryzen 9 7950x3d FirmwareAmd Ryzen 9 7900x3d FirmwareAmd Ryzen 7 7800x3d FirmwareAmd Ryzen 9 4900h FirmwareAmd Ryzen 9 4900hs FirmwareAmd Ryzen 7 4800h FirmwareAmd Ryzen 7 4800hs FirmwareAmd Ryzen 7 4980u FirmwareAmd Ryzen 7 4800u FirmwareAmd Ryzen 7 4700u FirmwareAmd Ryzen 5 4600h FirmwareAmd Ryzen 5 4600hs FirmwareAmd Ryzen 5 4680u FirmwareAmd Ryzen 5 4600u FirmwareAmd Ryzen 5 4500u FirmwareAmd Ryzen 3 4300u Firmware
9.8
CVSSv3

CVE-2022-23820

Failure to validate the AMD SMM communication buffer may allow an malicious user to corrupt the SMRAM potentially leading to arbitrary code execution.
Amd Ryzen 9 3900 Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3900 Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 9 3900x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3900x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 9 3900xt Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3900xt Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 9 3950x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3950x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 7 3700x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 7 3700x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 7 3800x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 7 3800x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 7 3800xt Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 7 3800xt Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3500 Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3500 Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3500x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3500x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3600 Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3600 Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3600x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3600x Firmware Comboam4 V2 Pi 1.2.0.8
9.8
CVSSv3

CVE-2022-23821

Improper access control in System Management Mode (SMM) may allow an malicious user to write to SPI ROM potentially leading to arbitrary code execution.
Amd Ryzen 9 3900 Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3900 Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 9 3900x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3900x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 9 3900xt Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3900xt Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 9 3950x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 9 3950x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 7 3700x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 7 3700x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 7 3800x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 7 3800x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 7 3800xt Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 7 3800xt Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3500 Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3500 Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3500x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3500x Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3600 Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3600 Firmware Comboam4 V2 Pi 1.2.0.8Amd Ryzen 5 3600x Firmware Comboam4 Pi 1.0.0.9Amd Ryzen 5 3600x Firmware Comboam4 V2 Pi 1.2.0.8
7.8
CVSSv3

CVE-2023-20555

Insufficient input validation in CpmDisplayFeatureSmm may allow an malicious user to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.
Amd Ryzen 3 3300 FirmwareAmd Ryzen 3 3300x FirmwareAmd Ryzen 5 3600 FirmwareAmd Ryzen 5 3600x FirmwareAmd Ryzen 7 3700 FirmwareAmd Ryzen 7 3700x FirmwareAmd Ryzen 9 3800x FirmwareAmd Ryzen 9 3850x FirmwareAmd Ryzen 9 5950x FirmwareAmd Ryzen 9 5900x FirmwareAmd Ryzen 9 5900 FirmwareAmd Ryzen 9 Pro 5945 FirmwareAmd Ryzen 7 5800x3d FirmwareAmd Ryzen 7 5800x FirmwareAmd Ryzen 7 5800 FirmwareAmd Ryzen 7 5700x FirmwareAmd Ryzen 7 Pro 5845 FirmwareAmd Ryzen 5 5600x3d FirmwareAmd Ryzen 5 5600x FirmwareAmd Ryzen 5 5600 FirmwareAmd Ryzen 5 Pro 5645 FirmwareAmd Ryzen 7 5700 Firmware
4.7
CVSSv3

CVE-2022-27672

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
Amd Athlon X4 750 Firmware -Amd Athlon X4 760k Firmware -Amd Athlon X4 830 Firmware -Amd Athlon X4 840 Firmware -Amd Athlon X4 860k Firmware -Amd Athlon X4 870k Firmware -Amd Athlon X4 880k Firmware -Amd Athlon X4 835 Firmware -Amd Athlon X4 845 Firmware -Amd Athlon X4 940 Firmware -Amd Athlon X4 950 Firmware -Amd Athlon X4 970 Firmware -Amd Ryzen Threadripper Pro 5995wx Firmware -Amd Ryzen Threadripper Pro 5975w Firmware -Amd Ryzen Threadripper Pro 5965wx Firmware -Amd Ryzen Threadripper Pro 5955wx Firmware -Amd Ryzen Threadripper Pro 5945wx Firmware -Amd Ryzen Threadripper 2990wx Firmware -Amd Ryzen Threadripper 2970wx Firmware -Amd Ryzen Threadripper 2950x Firmware -Amd Ryzen Threadripper 2920x Firmware -Amd Ryzen Threadripper 3960x Firmware -
5.5
CVSSv3

CVE-2022-23824

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.
Xen Xen -Amd Athlon X4 750 Firmware -Amd Athlon X4 760k Firmware -Amd Athlon X4 830 Firmware -Amd Athlon X4 835 Firmware -Amd Athlon X4 840 Firmware -Amd Athlon X4 845 Firmware -Amd Athlon X4 860k Firmware -Amd Athlon X4 870k Firmware -Amd Athlon X4 880k Firmware -Amd Athlon X4 940 Firmware -Amd Athlon X4 950 Firmware -Amd Athlon X4 970 Firmware -Amd Ryzen Threadripper Pro 3995wx Firmware -Amd Ryzen Threadripper Pro 3795wx Firmware -Amd Ryzen Threadripper Pro 3955wx Firmware -Amd Ryzen Threadripper Pro 3945wx Firmware -Amd Ryzen Threadripper Pro 5955wx Firmware -Amd Ryzen Threadripper Pro 5965wx Firmware -Amd Ryzen Threadripper Pro 5945wx Firmware -Amd Ryzen Threadripper Pro 5975wx Firmware -Amd Ryzen Threadripper Pro 5995wx Firmware -
5.6
CVSSv3

CVE-2021-46778

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler q...
Amd Athlon 3050ge Firmware -Amd Athlon 3150g Firmware -Amd Athlon 3150ge Firmware -Amd Epyc 7001 Firmware -Amd Epyc 7002 Firmware -Amd Epyc 7003 Firmware -Amd Epyc 7232p Firmware -Amd Epyc 7251 Firmware -Amd Epyc 7252 Firmware -Amd Epyc 7261 Firmware -Amd Epyc 7262 Firmware -Amd Epyc 7272 Firmware -Amd Epyc 7281 Firmware -Amd Epyc 7282 Firmware -Amd Epyc 72f3 Firmware -Amd Epyc 7301 Firmware -Amd Epyc 7302 Firmware -Amd Epyc 7302p Firmware -Amd Epyc 7313 Firmware -Amd Epyc 7313p Firmware -Amd Epyc 7343 Firmware -Amd Epyc 7351 Firmware -
6.5
CVSSv3

CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Amd Athlon X4 750 Firmware -Amd Athlon X4 760k Firmware -Amd Athlon X4 830 Firmware -Amd Athlon X4 835 Firmware -Amd Athlon X4 840 Firmware -Amd Athlon X4 845 Firmware -Amd Athlon X4 860k Firmware -Amd Athlon X4 870k Firmware -Amd Athlon X4 880k Firmware -Amd Athlon X4 940 Firmware -Amd Athlon X4 950 Firmware -Amd Athlon X4 970 Firmware -Amd Ryzen Threadripper Pro 3995wx Firmware -Amd Ryzen Threadripper Pro 3795wx Firmware -Amd Ryzen Threadripper Pro 3955wx Firmware -Amd Ryzen Threadripper Pro 3945wx Firmware -Amd Ryzen Threadripper Pro 5955wx Firmware -Amd Ryzen Threadripper Pro 5965wx Firmware -Amd Ryzen Threadripper Pro 5945wx Firmware -
6.5
CVSSv3

CVE-2022-29900

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.
Xen Xen -Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Amd Athlon X4 750 Firmware -Amd Athlon X4 760k Firmware -Amd Athlon X4 830 Firmware -Amd Athlon X4 835 Firmware -Amd Athlon X4 840 Firmware -Amd Athlon X4 845 Firmware -Amd Athlon X4 860k Firmware -Amd Athlon X4 870k Firmware -Amd Athlon X4 880k Firmware -Amd Athlon X4 940 Firmware -Amd Athlon X4 950 Firmware -Amd Athlon X4 970 Firmware -Amd Ryzen Threadripper Pro 3995wx Firmware -Amd Ryzen Threadripper Pro 3795wx Firmware -Amd Ryzen Threadripper Pro 3955wx Firmware -Amd Ryzen Threadripper Pro 3945wx Firmware -Amd Ryzen Threadripper Pro 5955wx Firmware -Amd Ryzen Threadripper Pro 5965wx Firmware -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook