GCVE - cpe:2.3:o:amd:ryzen_3_3580u_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_3_3580u_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 3 3580U Firmware (`1f7a0d05-8a4b-56b3-b8b2-70b58fc9adbb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20559`	vulnerable	2026-06-08 05:52:44.645518	Details available Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges. Published: 2023-03-23T18:49:41.533Z Updated: 2025-02-25T16:43:49.632Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20558`	vulnerable	2026-06-08 05:52:44.589592	Details available Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges. Published: 2023-03-23T18:50:11.488Z Updated: 2025-02-20T19:23:58.341Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46778`	vulnerable	2026-06-08 05:38:05.746254	Details available Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information. Published: 2022-08-09T20:20:12.911Z Updated: 2024-09-17T00:36:13.880Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1039	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26384`	vulnerable	2026-06-08 05:30:44.180143	Details available A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources. Published: 2022-07-14T19:28:56.918Z Updated: 2024-09-16T23:15:36.383Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26346`	vulnerable	2026-06-08 05:30:43.363562	Details available Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. Published: 2023-01-10T19:50:24.146Z Updated: 2025-04-09T15:14:19.086Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.