AMD AMD Ryzen™ Threadripper™ 3000 Series Processors
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20577 | | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially res | HIGH 7.4 | 0.2 % | ||
| CVE-2023-20572 | | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe | MEDIUM 5.6 | 0.2 % | ||
| CVE-2023-20540 | | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe | LOW 1.8 | 0.2 % | ||
| CVE-2025-0045 | | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, pot | MEDIUM 6.9 | 0.1 % | ||
| CVE-2021-26377 | | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trig | MEDIUM 4.1 | 0.2 % | ||
| CVE-2024-36348 | | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMI | LOW 3.8 | 0.3 % | ||
| CVE-2024-36349 | | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, pote | LOW 3.8 | 0.2 % | ||
| CVE-2024-36347 | | Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malic | MEDIUM 6.4 | 0.1 % | ||
| CVE-2023-20515 | | Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading | MEDIUM 5.7 | 0.2 % | ||
| CVE-2024-0179 | | SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentia | HIGH 8.2 | 0.2 % | ||
| CVE-2024-21925 | | Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code ex | HIGH 8.2 | 0.2 % | ||
| CVE-2024-21981 | | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution pri | MEDIUM 5.7 | 0.1 % | ||
| CVE-2023-20518 | | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell | LOW 1.9 | 0.1 % | ||
| CVE-2021-46772 | | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the struc | LOW 3.9 | 0.2 % | ||
| CVE-2021-46746 | | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access | MEDIUM 5.2 | 0.2 % | ||
| CVE-2021-26387 | | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell t | LOW 3.9 | 0.1 % | ||
| CVE-2021-26344 | | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to mod | HIGH 8.2 | 0.2 % | ||
| CVE-2023-31315 | | Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while S | HIGH 7.5 | 0.6 % |