GCVE - cpe:2.3:o:amd:ryzen_5_5500u_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_5_5500u_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 5 5500U Firmware (`b0b09964-494f-5315-9720-0dbdc174cd17`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20569`	vulnerable	2026-06-08 05:52:44.879286	Details available A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. Published: 2023-08-08T17:02:11.318Z Updated: 2024-09-23T03:18:32.598Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005 http://xenbits.xen.org/xsa/advisory-434.html http://www.openwall.com/lists/oss-security/2023/08/08/4 https://comsec.ethz.ch/research/microarch/inception/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20555`	vulnerable	2026-06-08 05:52:44.520234	Details available Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. Published: 2023-08-08T17:07:24.476Z Updated: 2024-10-24T14:36:35.845Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4003	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46758`	vulnerable	2026-06-08 05:38:04.844078	Details available Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity. Published: 2023-11-14T18:54:25.467Z Updated: 2024-08-04T05:17:42.665Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26388`	vulnerable	2026-06-08 05:30:44.233489	Details available Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service. Published: 2022-05-11T16:29:06.174Z Updated: 2024-09-16T23:01:19.603Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26365`	vulnerable	2026-06-08 05:30:43.732305	Details available Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents. Published: 2023-05-09T18:58:57.236Z Updated: 2025-01-28T15:47:24.862Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26354`	vulnerable	2026-06-08 05:30:43.588552	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.