Improper input validation in the SMM Supervisor may allow an attacker with a compromised…
Priority MEDIUM 44Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
Why it matters now
EPSS 0.01045 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4 | various | — | No fix listed | CNA |
| AMD | Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” | various | — | No fix listed | CNA |
| AMD | Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” X3D | various | — | No fix listed | CNA |
| AMD | Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” | various | — | No fix listed | CNA |
| AMD | Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Formerly codenamed “Phoenix” | various | — | No fix listed | CNA |
- Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4 VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” X3D VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Formerly codenamed “Phoenix” VendorAMD Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 128
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_1.2.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_1.2.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_1.2.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_1.2.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* | before comboam4v2_1.2.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_1.2.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_1.2.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_1.2.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_1.2.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_1.2.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 118 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* | before comboam4v2_1.2.0.b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7950x3d_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7950x_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7950x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7900x3d_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7900_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7900x_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7900x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_pro_7945_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_pro_7945:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7800x3d_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7700x_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7700x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7700_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_pro_7745_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_pro_7745:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7600x_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7600_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_pro_7645_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_pro_7645:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7500f_firmware:*:*:*:*:*:*:*:* | before comboam5pi_1.0.8.0 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7500f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_5500h_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_5500h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:* | before cezannepi-fp6_1.0.0.fa | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6980hx_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6980hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6900hx_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6900hx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_6900hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_6900hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_6800h_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_6800hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_6800u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_6800u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_6600h_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_6600hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_6600u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7735hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7736u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7735u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7535hs_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7535u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_7335u_firmware:*:*:*:*:*:*:*:* | before rembrandtpi-fp7_1.0.0.9b | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_pro_7940hs_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_pro_7940hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_9_7940h_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_9_7940h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_pro_7840hs_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_pro_7840hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_7840h_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_7840h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_pro_7840u_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_pro_7840u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_pro_7640hs_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_pro_7640hs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_7640h_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_7640h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_pro_7640u_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_pro_7640u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_pro_7545u_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_pro_7545u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_pro_7540u_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_pro_7540u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_7440u_firmware:*:*:*:*:*:*:*:* | before phoenixpi-fp8-fp7_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_7440u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:* Versions before comboam4v2_1.2.0.b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7950x3d_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7950x_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7950x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7900x3d_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7900_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7900x_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7900x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_pro_7945_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_pro_7945:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7800x3d_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7700x_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7700x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7700_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_pro_7745_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_pro_7745:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7600x_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7600_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_pro_7645_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_pro_7645:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7500f_firmware:*:*:*:*:*:*:*:* Versions before comboam5pi_1.0.8.0 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7500f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5980hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_5900hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5825u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_5800u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5625u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5600u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5560u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_5500h_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_5500h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5425u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:* Versions before cezannepi-fp6_1.0.0.fa Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6980hx_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6980hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6900hx_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6900hx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_6900hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_6900hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_6800h_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_6800hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_6800u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_6800u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_6600h_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_6600hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_6600u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7735hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7736u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7735u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7535hs_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7535u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_7335u_firmware:*:*:*:*:*:*:*:* Versions before rembrandtpi-fp7_1.0.0.9b Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_pro_7940hs_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_pro_7940hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_9_7940h_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_9_7940h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_pro_7840hs_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_pro_7840hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_7840h_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_7840h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_pro_7840u_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_pro_7840u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_pro_7640hs_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_pro_7640hs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_7640h_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_7640h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_pro_7640u_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_pro_7640u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_pro_7545u_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_pro_7545u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_pro_7540u_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_pro_7540u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_7440u_firmware:*:*:*:*:*:*:*:* Versions before phoenixpi-fp8-fp7_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_7440u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20596
- 2026-10-03 Alias added: GHSA-r2mq-3mfq-2p2w
References
More AMD Ryzen 3 5125c Firmware vulnerabilities
- TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
- TI-2022-07838 Improper input validation in AMD Ryzen™ 3000 series Desktop Processors “Matisse" CVSS 3.1CRITICAL 9.8
- TI-2023-07011 Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker… CVSS 3.1HIGH 8.8
- TI-2023-07010 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to… CVSS 3.1HIGH 8.8
- TI-2023-07023 Race condition in AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” CVSS 3.1HIGH 8.1
- TI-2023-07008 Out-of-bounds write in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 CVSS 3.1HIGH 7.8
Sources
- CVE-2023-20596 · CVE Program
- CVE-2023-20596 · NVD
- FIRST EPSS
- GHSA-r2mq-3mfq-2p2w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences