Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor)…
Priority LOW 27Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
Why it matters now
EPSS 0.00325 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” | various | — | No fix listed | CNA |
| AMD | Ryzen™ 7000 Series Desktop Processors “Raphael” XD3 | various | — | No fix listed | CNA |
| AMD | Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 | various | — | No fix listed | CNA |
| AMD | Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | various | — | No fix listed | CNA |
| AMD | Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” | various | — | No fix listed | CNA |
- Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 7000 Series Desktop Processors “Raphael” XD3 VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” VendorAMD Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 122
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.8 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.8 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.8 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.8 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.8 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.8 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.8 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.8 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.8 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.8 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 112 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_pi_1.2.0.8 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7950x3d_firmware:*:*:*:*:*:*:*:* | before comboam5_1.0.0.1 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7900x3d_firmware:*:*:*:*:*:*:*:* | before comboam5_1.0.0.1 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7800x3d_firmware:*:*:*:*:*:*:*:* | before comboam5_1.0.0.1 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_4900h_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_4900h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_4900hs_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_4900hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_4800h_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_4800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_4800hs_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_4800hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_4980u_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_4980u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_4800u_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_4800u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_4700u_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_4700u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_4600h_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_4600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_4600hs_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_4600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_4680u_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_4680u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_4600u_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_4600u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_4500u_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_4500u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_4300u_firmware:*:*:*:*:*:*:*:* | before renoirpi-fp6_1.0.0.a | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_4300u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5700u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5500u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5500u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5300u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5500h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5500h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6980hx_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6980hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6900hx_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6900hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6900hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6900hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_6800h_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_6800hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_6800u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_6800u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_6600h_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_6600hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_6600u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7735hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7736u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7735u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7535hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7535u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_7335u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_pro_7730u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_pro_7730u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_pro_7530u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_pro_7530u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_pro_7330u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.c | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_pro_7330u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_pi_1.2.0.8 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7950x3d_firmware:*:*:*:*:*:*:*:* Versions before comboam5_1.0.0.1 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7900x3d_firmware:*:*:*:*:*:*:*:* Versions before comboam5_1.0.0.1 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7800x3d_firmware:*:*:*:*:*:*:*:* Versions before comboam5_1.0.0.1 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_4900h_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_4900h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_4900hs_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_4900hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_4800h_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_4800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_4800hs_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_4800hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_4980u_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_4980u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_4800u_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_4800u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_4700u_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_4700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_4600h_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_4600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_4600hs_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_4600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_4680u_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_4680u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_4600u_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_4600u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_4500u_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_4500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_4300u_firmware:*:*:*:*:*:*:*:* Versions before renoirpi-fp6_1.0.0.a Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_4300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5700u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5500u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5300u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5500h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5500h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6980hx_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6980hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6900hx_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6900hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6900hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6900hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_6800h_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_6800hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_6800u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_6800u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_6600h_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_6600hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_6600u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7735hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7736u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7735u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7535hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7535u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_7335u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_pro_7730u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_pro_7730u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_pro_7530u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_pro_7530u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_pro_7330u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.c Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_pro_7330u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" and 7 more products — amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
6 records Highest priority Priority MEDIUM 2 MEDIUM, 4 LOW
Other records, highest priority first
- TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to…Priority MEDIUM 51
- TI-2022-07838 Improper input validation in AMD Ryzen™ 3000 series Desktop Processors “Matisse"Priority MEDIUM 43
- TI-2023-07023 Race condition in AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”Priority LOW 36
Timeline
- 2026-10-02 Threatist record created from CVE-2021-46758
- 2026-10-03 Alias added: GHSA-qvg6-x224-c55m
References
More AMD Ryzen 3 4300u Firmware vulnerabilities
- TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
- TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
- TI-2022-07838 Improper input validation in AMD Ryzen™ 3000 series Desktop Processors “Matisse" CVSS 3.1CRITICAL 9.8
- TI-2023-07008 Out-of-bounds write in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 CVSS 3.1HIGH 7.8
- TI-2022-12252 Mis-trained branch predictions for return instructions may allow arbitrary speculative… CVSS 3.1MEDIUM 6.5
- TI-2022-07841 Observable discrepancy in AMD Processors CVSS 3.1MEDIUM 6.5
Sources
- CVE-2021-46758 · CVE Program
- CVE-2021-46758 · NVD
- FIRST EPSS
- GHSA-qvg6-x224-c55m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences