Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_3_5425c_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductRyzen 3 5425C Firmware (756fcfb9-aca4-5636-8994-a56517d6df4d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20579 vulnerable 2026-06-08 05:52:45.181511 Details available
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
Published: 2024-02-13T19:32:11.904Z
Updated: 2025-03-14T17:21:09.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20559 vulnerable 2026-06-08 05:52:44.645088 Details available
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
Published: 2023-03-23T18:49:41.533Z
Updated: 2025-02-25T16:43:49.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20558 vulnerable 2026-06-08 05:52:44.577425 Details available
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
Published: 2023-03-23T18:50:11.488Z
Updated: 2025-02-20T19:23:58.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26384 vulnerable 2026-06-08 05:30:44.178936 Details available
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.
Published: 2022-07-14T19:28:56.918Z
Updated: 2024-09-16T23:15:36.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26382 vulnerable 2026-06-08 05:30:44.156925 Details available
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
Published: 2022-07-14T19:28:30.676Z
Updated: 2024-09-16T22:29:40.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26339 vulnerable 2026-06-08 05:30:43.002757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.