R3
Product
Ryzen 3 5300u Firmware
7
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add Ryzen 3 5300u Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26365 | 8.2 | May 9 | Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of… Affected: before cezannepi-fp6_1.0.0.8 |
| CVE-2021-26391 | 7.8 | Nov 9 | Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the… Affected: All versions, or not specified |
| CVE-2021-46758 | 6.1 | Nov 14 | Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a… Affected: before cezannepi-fp6_1.0.0.c |
| CVE-2023-20593 | 5.5 | Jul 24 | An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information Affected: All versions, or not specified |
| CVE-2021-26346 | 5.5 | Jan 11 | Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash… Affected: All versions, or not specified |
| CVE-2021-26393 | 5.5 | Nov 9 | Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA… Affected: All versions, or not specified |
| CVE-2023-20569 | 4.7 | Aug 8 | A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction Affected: before cezannepi-fp6_1.0.0.fa |
Showing 7
