Skip to main content

Ryzen 4700S Firmware

3 CVEs product

Monthly

CVE-2023-20597 Sep 20, 18:15 MEDIUM This Month

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Amd Ryzen Threadripper 3960X Firmware Ryzen Threadripper 3970X Firmware +99
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2023-20594 Sep 20, 18:15 MEDIUM This Month

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Amd Epyc 7763 Firmware Epyc 7713P Firmware +123
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2023-20555 Aug 08, 18:15 HIGH This Week

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Amd Ryzen 3 3300X Firmware +118
NVD
CVSS 3.1
7.8
EPSS
0.3%
EPSS 0% CVSS 5.5
MEDIUM This Month

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Amd +101
NVD
EPSS 0% CVSS 4.4
MEDIUM This Month

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Amd +125
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +120
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy