Approved changes feed: RSS · Atom

cpe:2.3:a:amd:amd_ryzen™_9000_series_desktop_processors_(formerly_codenamed_"granite_ridge"):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductAmd Ryzen™ 9000 Series Desktop Processors (Formerly Codenamed "Granite Ridge") (b1c41379-9015-5c54-b7c7-9d5511bf37b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0438 not_vulnerable 2026-06-08 07:47:12.322017 Details available
A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.
Published: 2026-05-15T01:41:25.568Z
Updated: 2026-05-19T21:01:36.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54502 not_vulnerable 2026-06-08 07:33:12.751865 Details available
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
Published: 2026-04-16T18:46:13.377Z
Updated: 2026-07-15T01:26:07.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48521 not_vulnerable 2026-06-08 07:27:16.128186 Details available
Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity or crash.
Published: 2026-05-15T01:45:34.221Z
Updated: 2026-05-15T13:32:19.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48512 not_vulnerable 2026-06-08 07:27:16.069623 Details available
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
Published: 2026-05-15T01:45:05.943Z
Updated: 2026-05-16T03:56:09.610Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48503 not_vulnerable 2026-06-08 07:27:16.032072 Details available
HIGH (7.8)
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Published: 2026-02-11T14:26:49.430Z
Updated: 2026-02-26T14:44:26.626Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.