GCVE - cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 5 3500U Firmware (`d6d55e93-f267-5d3f-b4cd-9c250e137c8f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20579`	vulnerable	2026-06-08 05:52:45.199638	Details available Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability. Published: 2024-02-13T19:32:11.904Z Updated: 2025-03-14T17:21:09.724Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20555`	vulnerable	2026-06-08 05:52:44.499044	Details available Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. Published: 2023-08-08T17:07:24.476Z Updated: 2024-10-24T14:36:35.845Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4003	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20521`	vulnerable	2026-06-08 05:52:43.342619	Details available LOW (3.3) TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service. Published: 2023-11-14T18:52:31.662Z Updated: 2024-08-02T09:05:36.873Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23815`	vulnerable	2026-06-08 05:40:58.568222	Details available HIGH (7.5) Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution. Published: 2024-08-13T16:51:43.735Z Updated: 2025-03-18T20:42:11.741Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26382`	vulnerable	2026-06-08 05:30:44.157452	Details available An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service. Published: 2022-07-14T19:28:30.676Z Updated: 2024-09-16T22:29:40.793Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26367`	vulnerable	2026-06-08 05:30:43.790228	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.