R3
Product
Ryzen 3 3500c Firmware
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Ryzen 3 3500c Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20559 | 8.8 | Apr 2 | Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges Affected: All versions, or not specified |
| CVE-2023-20558 | 8.8 | Apr 2 | Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges Affected: All versions, or not specified |
| CVE-2021-26384 | 7.8 | Jul 14 | A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory… Affected: All versions, or not specified |
| CVE-2023-20597 | 5.5 | Sep 20 | Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access Affected: comboam4pi_1.0.0.9; comboam4v2pi_1.2.0.8 |
| CVE-2021-26346 | 5.5 | Jan 11 | Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash… Affected: All versions, or not specified |
| CVE-2023-20594 | 4.4 | Sep 20 | Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access Affected: comboam4pi_1.0.0.9; comboam4v2pi_1.2.0.8 |
Showing 6