Veille CVE

Recherche « AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors »

4 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors » ✕
  1. CVE-2023-20577 7.4 Élevée

    AMD 2nd Gen AMD EPYC™ Processors · AMD 3rd Gen AMD EPYC™ Processors · AMD 4th Gen AMD EPYC™ Processors · AMD Instinct™ MI300A

    A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

  2. CVE-2023-20572 5.6 Moyenne

    AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics · AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

    An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.

  3. CVE-2023-20540 1.8 Faible

    AMD Ryzen™ 3000 Series Desktop Processors · AMD Ryzen™ 5000 Series Desktop Processors · AMD Ryzen™ Threadripper™ 3000 Series Processors · AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

    An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity.

  4. CVE-2025-48521 6.9 Moyenne

    AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir") · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R") · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Picasso") · AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Phoenix")

    Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.