Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_3_3350u_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductRyzen 3 3350U Firmware (482aaf05-203d-5513-96e6-4e34b28b5360)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20579 vulnerable 2026-06-08 05:52:45.199711 Details available
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
Published: 2024-02-13T19:32:11.904Z
Updated: 2025-03-14T17:21:09.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20555 vulnerable 2026-06-08 05:52:44.499122 Details available
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.
Published: 2023-08-08T17:07:24.476Z
Updated: 2024-10-24T14:36:35.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20521 vulnerable 2026-06-08 05:52:43.345264 Details available
LOW (3.3)
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Published: 2023-11-14T18:52:31.662Z
Updated: 2024-08-02T09:05:36.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26367 vulnerable 2026-06-08 05:30:43.788179 Details available
MEDIUM (5.7)
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
Published: 2024-08-13T16:50:05.825Z
Updated: 2024-12-04T16:25:09.987Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.