A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may…
Priority LOW 26Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00157 4th percentileScored 2026-11-07
Fix Fixed AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics (AMD): ComboAM4v2 PI 1.2.0.5AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (AMD): ComboAM4PI 1.0.0.9, ComboAM4v2 PI 1.2.0.8+13 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | — | ComboAM4v2 PI 1.2.0.5 | Patch available | CNA |
| AMD | AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | — | ComboAM4PI 1.0.0.9, ComboAM4v2 PI 1.2.0.8 | Patch available | CNA |
| AMD | AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics | — | ComboAM4v2 PI 1.2.0.5 | Patch available | CNA |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | — | PicassoPI-FP5 1.0.0.E | Patch available | CNA |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | — | PollockPI-FT5 1.0.0.4 | Patch available | CNA |
| AMD | AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics | — | PicassoPI-FP5 1.0.0.E | Patch available | CNA |
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | — | RenoirPI-FP6 1.0.0.7 | Patch available | CNA |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | — | CezannePI-FP6 1.0.0.6 | Patch available | CNA |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics | — | CezannePI-FP6 1.0.0.6 | Patch available | CNA |
| AMD | AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics | — | CezannePI-FP6 1.0.0.6 | Patch available | CNA |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics | — | CezannePI-FP6 1.0.0.6 | Patch available | CNA |
| AMD | AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics | — | CezannePI-FP6 1.0.0.6 | Patch available | CNA |
| AMD | AMD Radeon™ RX 6000 Series Graphics Cards | — | AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01) | Patch available | CNA |
| AMD | AMD Radeon™ PRO W6000 Series Graphics Cards | — | AMD Software: PRO Edition 23.Q4 (23.30.13.03) | Patch available | CNA |
| AMD | AMD Ryzen™ Embedded R1000 Series Processors | — | EmbeddedPI-FP5 1.2.0.A | Patch available | CNA |
| AMD | AMD Ryzen™ Embedded R2000 Series Processors | — | EmbeddedR2KPI-FP5 1.0.0.2 | Patch available | CNA |
| AMD | AMD Ryzen™ Embedded V1000 Series Processors | — | EmbeddedPI-FP5 1.2.0.A | Patch available | CNA |
| AMD | AMD Ryzen™ Embedded V2000 Series Processors | — | EmbeddedPI-FP6 1.0.0.6 | Patch available | CNA |
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics VendorAMD Affected — Fixed in ComboAM4v2 PI 1.2.0.5 Patch available CNA
- AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics VendorAMD Affected — Fixed in ComboAM4PI 1.0.0.9, ComboAM4v2 PI 1.2.0.8 Patch available CNA
- AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics VendorAMD Affected — Fixed in ComboAM4v2 PI 1.2.0.5 Patch available CNA
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in PicassoPI-FP5 1.0.0.E Patch available CNA
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in PollockPI-FT5 1.0.0.4 Patch available CNA
- AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics VendorAMD Affected — Fixed in PicassoPI-FP5 1.0.0.E Patch available CNA
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in RenoirPI-FP6 1.0.0.7 Patch available CNA
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.0.6 Patch available CNA
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.0.6 Patch available CNA
- AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.0.6 Patch available CNA
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.0.6 Patch available CNA
- AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.0.6 Patch available CNA
- AMD Radeon™ RX 6000 Series Graphics Cards VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01) Patch available CNA
- AMD Radeon™ PRO W6000 Series Graphics Cards VendorAMD Affected — Fixed in AMD Software: PRO Edition 23.Q4 (23.30.13.03) Patch available CNA
- AMD Ryzen™ Embedded R1000 Series Processors VendorAMD Affected — Fixed in EmbeddedPI-FP5 1.2.0.A Patch available CNA
- AMD Ryzen™ Embedded R2000 Series Processors VendorAMD Affected — Fixed in EmbeddedR2KPI-FP5 1.0.0.2 Patch available CNA
- AMD Ryzen™ Embedded V1000 Series Processors VendorAMD Affected — Fixed in EmbeddedPI-FP5 1.2.0.A Patch available CNA
- AMD Ryzen™ Embedded V2000 Series Processors VendorAMD Affected — Fixed in EmbeddedPI-FP6 1.0.0.6 Patch available CNA
CPE configurations NVD · 103
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:* | before 23.12.1 | Vulnerable | AMD |
| cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:* Versions before 23.12.1 Vulnerable ·AMD
- cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 93 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6750_gre:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* | up to 23.q4 | Vulnerable | AMD |
| cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.6 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3350u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3450u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3450u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3500u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3500c_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3500c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3550h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3580u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3700u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3700c_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3700c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3750h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3780u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_3150c_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_3150c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_pro_3145b_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_pro_3145b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_silver_3050c_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_silver_3050c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_pro_3045b_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_pro_3045b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_silver_3050e_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_silver_3050e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:*:*:*:*:*:*:*:* | before comboam4pi_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_pro_3150g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_3150g_firmware:*:*:*:*:*:*:*:* | before comboam4pi_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_3150g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:*:*:*:*:*:*:*:* | before comboam4pi_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_pro_3150ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_pro_300ge_firmware:*:*:*:*:*:*:*:* | before comboam4pi_1.0.0.9 | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_pro_300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_4300ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_4300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_4600ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_4600ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_4700ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_4700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_4300g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_4300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_4600g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_4600g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_4700g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_4700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6750_gre:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* Versions up to 23.q4 Vulnerable ·AMD
- cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.6 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3350u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3450u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3450u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3500c_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3500c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3550h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3580u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3700c_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3700c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3750h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3780u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_3150c_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_3150c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_pro_3145b_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_pro_3145b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_silver_3050c_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_silver_3050c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_pro_3045b_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_pro_3045b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_silver_3050e_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_silver_3050e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:*:*:*:*:*:*:*:* Versions before comboam4pi_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_pro_3150g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_3150g_firmware:*:*:*:*:*:*:*:* Versions before comboam4pi_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_3150g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4pi_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_pro_3150ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_pro_300ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4pi_1.0.0.9 Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_pro_300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_4300ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_4300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_4600ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_4600ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_4700ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_4700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_4300g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_4300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_4600g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_4600g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_4700g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_4700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
- Fix · CNA AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics (AMD) Fixed in ComboAM4v2 PI 1.2.0.5
- Fix · CNA AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (AMD) Fixed in ComboAM4PI 1.0.0.9, ComboAM4v2 PI 1.2.0.8
- Fix · CNA AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics (AMD) Fixed in ComboAM4v2 PI 1.2.0.5
- Fix · CNA AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in PicassoPI-FP5 1.0.0.E
- Fix · CNA AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in PollockPI-FT5 1.0.0.4
- Fix · CNA AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics (AMD) Fixed in PicassoPI-FP5 1.0.0.E
- Fix · CNA AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in RenoirPI-FP6 1.0.0.7
- Fix · CNA AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.0.6
- Fix · CNA AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.0.6
- Fix · CNA AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.0.6
- Fix · CNA AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.0.6
- Fix · CNA AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.0.6
- Fix · CNA AMD Radeon™ RX 6000 Series Graphics Cards (AMD) Fixed in AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)
- Fix · CNA AMD Radeon™ PRO W6000 Series Graphics Cards (AMD) Fixed in AMD Software: PRO Edition 23.Q4 (23.30.13.03)
- Fix · CNA AMD Ryzen™ Embedded R1000 Series Processors (AMD) Fixed in EmbeddedPI-FP5 1.2.0.A
- Fix · CNA AMD Ryzen™ Embedded R2000 Series Processors (AMD) Fixed in EmbeddedR2KPI-FP5 1.0.0.2
- Fix · CNA AMD Ryzen™ Embedded V1000 Series Processors (AMD) Fixed in EmbeddedPI-FP5 1.2.0.A
- Fix · CNA AMD Ryzen™ Embedded V2000 Series Processors (AMD) Fixed in EmbeddedPI-FP6 1.0.0.6
Timeline
- 2026-10-02 Threatist record created from CVE-2021-26367
- 2026-10-03 Alias added: GHSA-2xq4-823c-q5v9
References
More AMD Athlon Gold 3150c Firmware vulnerabilities
- TI-2023-07008 Out-of-bounds write in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 CVSS 3.1HIGH 7.8
- TI-2021-08144 Improper input validation in AMD Ryzen 5000 Series CVSS 3.1HIGH 7.8
- TI-2021-08213 Out-of-bounds write in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1HIGH 7.8
- TI-2020-10274 Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a… CVSS 3.1HIGH 7.8
- TI-2020-10273 Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged… CVSS 3.1HIGH 7.8
- TI-2023-07039 fTPM Voltage Fault Injection CVSS 3.1MEDIUM 6.8
Sources
- CVE-2021-26367 · CVE Program
- CVE-2021-26367 · NVD
- FIRST EPSS
- GHSA-2xq4-823c-q5v9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences