AMD AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4

9 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-46794various Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox HIGH 7.50.6 %
CVE-2021-46773various Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity orHIGH 8.80.8 %
CVE-2021-46756various Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious CRITICAL 9.10.6 %
CVE-2021-46755various Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious HIGH 7.50.6 %
CVE-2021-46749various Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox HIGH 7.50.6 %
CVE-2021-26406various Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES HIGH 7.50.4 %
CVE-2021-26371various A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userMEDIUM 5.50.2 %
CVE-2021-26356various A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data cHIGH 7.40.4 %
CVE-2021-26354various Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory valMEDIUM 5.50.2 %