AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
At a glance
- Source
- NVD
- EPSS
- EPSS 0.16 % · percentile 6 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- AMD
- NVD status
- Modified
Description
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
Weaknesses (CWE)
- CWE-787 — Out-of-bounds Write
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H | AMD |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H | NVD · psirt@amd.com (Secondary) |
| CVSS 3.1 | HIGH 8.2 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-28744
- GCVE · GCVE-0-2022-23815
Affected configurations (NVD CPE)
cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_pro_3700u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| AMD · AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | affected various |
| AMD · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | unaffected PicassoPI-FP5 1.0.0.F |
| AMD · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | unaffected PollockPI-FT5 1.0.0.5 |
| AMD · AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics | unaffected PicassoPI-FP5 1.0.0.E |
| AMD · AMD RyzenTM Embedded R1000 | unaffected EmbeddedPI-FP5 1.2.0.A |
| AMD · AMD RyzenTM Embedded R2000 | unaffected EmbeddedR2KPI-FP5 1.0.0.2 |
| AMD · AMD RyzenTM Embedded V1000 | unaffected EmbeddedPI-FP5 1.2.0.A |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |