GCVE - cpe:2.3:o:amd:ryzen_9_5900_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_9_5900_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 9 5900 Firmware (`159f15b5-65cd-52c7-8856-9cf1432c1f2d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20569`	vulnerable	2026-06-08 05:52:44.877909	Details available A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. Published: 2023-08-08T17:02:11.318Z Updated: 2024-09-23T03:18:32.598Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005 http://xenbits.xen.org/xsa/advisory-434.html http://www.openwall.com/lists/oss-security/2023/08/08/4 https://comsec.ethz.ch/research/microarch/inception/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20555`	vulnerable	2026-06-08 05:52:44.443193	Details available Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. Published: 2023-08-08T17:07:24.476Z Updated: 2024-10-24T14:36:35.845Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4003	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20533`	vulnerable	2026-06-08 05:52:43.551685	Details available MEDIUM (6.1) Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. Published: 2023-11-14T18:52:52.106Z Updated: 2024-08-02T09:05:36.915Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46774`	vulnerable	2026-06-08 05:38:05.618978	Details available MEDIUM (6.7) Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. Published: 2023-11-14T18:52:11.012Z Updated: 2024-10-11T18:07:59.642Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26356`	vulnerable	2026-06-08 05:30:43.634215	Details available A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure. Published: 2023-05-09T18:58:48.108Z Updated: 2025-01-28T15:48:38.470Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.