GCVE - cpe:2.3:a:amd:ryzen_5000_series:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:amd:ryzen_5000_series:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 5000 Series (`a989551d-9753-5308-bf4c-545d787f7a8b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-46795`	vulnerable	2026-06-08 05:38:06.051995	Details available A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service. Published: 2023-01-10T20:53:25.868Z Updated: 2025-04-09T15:13:26.855Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-39298`	vulnerable	2026-06-08 05:33:49.669823	Details available A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware. Published: 2022-02-16T16:38:10.726Z Updated: 2024-08-04T02:06:42.610Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26347`	vulnerable	2026-06-08 05:30:43.415758	Details available Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. Published: 2022-05-11T16:22:09.774Z Updated: 2024-08-03T20:26:25.052Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26346`	vulnerable	2026-06-08 05:30:43.347607	Details available Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. Published: 2023-01-10T19:50:24.146Z Updated: 2025-04-09T15:14:19.086Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26316`	vulnerable	2026-06-08 05:30:42.335502	Details available Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution. Published: 2023-01-10T19:46:46.575Z Updated: 2025-04-09T15:19:17.090Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.