AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20577 | | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially res | HIGH 7.4 | 0.2 % | ||
| CVE-2023-20576 | | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of ser | HIGH 7.7 | 0.1 % | ||
| CVE-2024-21981 | | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution pri | MEDIUM 5.7 | 0.1 % | ||
| CVE-2023-20518 | | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell | LOW 1.9 | 0.1 % | ||
| CVE-2021-46772 | | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the struc | LOW 3.9 | 0.2 % | ||
| CVE-2021-46746 | | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access | MEDIUM 5.2 | 0.2 % | ||
| CVE-2021-26387 | | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell t | LOW 3.9 | 0.1 % | ||
| CVE-2021-26367 | | A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address ran | MEDIUM 6.0 | 0.2 % | ||
| CVE-2021-26344 | | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to mod | HIGH 8.2 | 0.2 % | ||
| CVE-2023-31315 | | Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while S | HIGH 7.5 | 0.6 % | ||
| CVE-2022-23829 | | A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native Syst | HIGH 8.2 | 0.2 % | ||
| CVE-2023-20579 | various | Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections | MEDIUM 6.0 | 0.2 % |