AMD AMD Ryzen™ 3000 Series Desktop Processors
43 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20577 | | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially res | HIGH 7.4 | 0.2 % | ||
| CVE-2023-20576 | | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of ser | HIGH 7.7 | 0.1 % | ||
| CVE-2023-20572 | | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe | MEDIUM 5.6 | 0.2 % | ||
| CVE-2023-20540 | | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe | LOW 1.8 | 0.2 % | ||
| CVE-2021-46747 | | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to m | HIGH 7.1 | 0.1 % | ||
| CVE-2025-54518 | | Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instruction | HIGH 7.3 | 0.3 % | ||
| CVE-2025-48516 | | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to | MEDIUM 6.9 | 0.1 % | ||
| CVE-2021-26380 | | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range re | LOW 1.8 | 0.1 % | ||
| CVE-2024-21962 | | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p | HIGH 8.6 | 0.1 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2025-62619 | | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retriev | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-62625 | | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentia | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-54502 | | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( | HIGH 7.1 | 0.1 % | ||
| CVE-2023-31364 | | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f | HIGH 8.3 | 0.3 % | ||
| CVE-2024-21961 | | Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual | MEDIUM 6.0 | 0.3 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2021-26381 | | Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a lar | HIGH 7.1 | 0.2 % | ||
| CVE-2025-29949 | | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to w | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2024-36354 | | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys | HIGH 7.5 | 0.2 % | ||
| CVE-2024-21970 | | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti | MEDIUM 4.4 | 0.1 % | ||
| CVE-2024-21947 | | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially re | HIGH 7.5 | 0.1 % | ||
| CVE-2023-31330 | | An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memor | LOW 2.5 | 0.1 % | ||
| CVE-2021-26377 | | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trig | MEDIUM 4.1 | 0.2 % | ||
| CVE-2024-36348 | | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMI | LOW 3.8 | 0.3 % | ||
| CVE-2024-36349 | | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, pote | LOW 3.8 | 0.2 % | ||
| CVE-2024-36347 | | Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malic | MEDIUM 6.4 | 0.1 % | ||
| CVE-2023-31345 | | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execu | HIGH 7.5 | 0.2 % | ||
| CVE-2023-31343 | | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execu | HIGH 7.5 | 0.2 % | ||
| CVE-2023-31342 | | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execu | HIGH 7.5 | 0.2 % | ||
| CVE-2023-20515 | | Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading | MEDIUM 5.7 | 0.2 % | ||
| CVE-2024-0179 | | SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentia | HIGH 8.2 | 0.2 % | ||
| CVE-2024-21925 | | Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code ex | HIGH 8.2 | 0.2 % | ||
| CVE-2024-21981 | various | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution pri | MEDIUM 5.7 | 0.1 % | ||
| CVE-2023-20518 | | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell | LOW 1.9 | 0.1 % | ||
| CVE-2022-23817 | | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to | HIGH 7.3 | 0.2 % | ||
| CVE-2021-46772 | various | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the struc | LOW 3.9 | 0.2 % | ||
| CVE-2021-46746 | | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access | MEDIUM 5.2 | 0.2 % | ||
| CVE-2021-26387 | | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell t | LOW 3.9 | 0.1 % | ||
| CVE-2021-26344 | various | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to mod | HIGH 8.2 | 0.2 % | ||
| CVE-2023-31315 | | Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while S | HIGH 7.5 | 0.6 % | ||
| CVE-2022-23829 | | A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native Syst | HIGH 8.2 | 0.2 % |