Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductRyzen Threadripper 2950X Firmware (f361eae3-c6cb-5e58-8433-23d303803791)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20559 vulnerable 2026-06-08 05:52:44.646671 Details available
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
Published: 2023-03-23T18:49:41.533Z
Updated: 2025-02-25T16:43:49.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20558 vulnerable 2026-06-08 05:52:44.621665 Details available
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
Published: 2023-03-23T18:50:11.488Z
Updated: 2025-02-20T19:23:58.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20526 vulnerable 2026-06-08 05:52:43.425857 Details available
LOW (1.9)
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Published: 2023-11-14T18:52:41.992Z
Updated: 2024-08-02T09:05:36.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20521 vulnerable 2026-06-08 05:52:43.331508 Details available
LOW (3.3)
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Published: 2023-11-14T18:52:31.662Z
Updated: 2024-08-02T09:05:36.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26388 vulnerable 2026-06-08 05:30:44.231284 Details available
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.
Published: 2022-05-11T16:29:06.174Z
Updated: 2024-09-16T23:01:19.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26378 vulnerable 2026-06-08 05:30:44.107132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26376 vulnerable 2026-06-08 05:30:44.047403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26375 vulnerable 2026-06-08 05:30:44.036766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26373 vulnerable 2026-06-08 05:30:44.006401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.