GCVE - cpe:2.3:o:amd:ryzen_9_5900x_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_9_5900x_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 9 5900X Firmware (`b9dc0d7f-4d66-50d0-815e-13da44c62cb3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20589`	vulnerable	2026-06-08 05:52:45.301589	fTPM Voltage Fault Injection An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. Published: 2023-08-08T17:04:17.854Z Updated: 2024-11-13T15:59:15.464Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4005	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23817`	not_vulnerable	2026-06-08 05:40:58.633345	Details available Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation. Published: 2024-08-13T16:51:45.468Z Updated: 2026-05-15T03:03:25.036Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46778`	vulnerable	2026-06-08 05:38:05.854913	Details available Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information. Published: 2022-08-09T20:20:12.911Z Updated: 2024-09-17T00:36:13.880Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1039	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26392`	vulnerable	2026-06-08 05:30:44.308882	Details available Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA. Published: 2022-11-09T20:44:26.258Z Updated: 2024-09-16T20:51:46.791Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26390`	vulnerable	2026-06-08 05:30:44.237474	Details available A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data. Published: 2022-05-10T18:24:25.459Z Updated: 2024-09-16T23:11:12.188Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26371`	vulnerable	2026-06-08 05:30:43.851856	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26365`	vulnerable	2026-06-08 05:30:43.721492	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26354`	vulnerable	2026-06-08 05:30:43.563448	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26352`	vulnerable	2026-06-08 05:30:43.487634	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26346`	vulnerable	2026-06-08 05:30:43.412871	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26316`	vulnerable	2026-06-08 05:30:42.461632	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12931`	vulnerable	2026-06-08 05:17:59.727207	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12930`	vulnerable	2026-06-08 05:17:59.624493	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.