GCVE - cpe:2.3:o:amd:ryzen_5_3580u_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_5_3580u_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 5 3580U Firmware (`bd1f9c55-3b4b-5596-849b-9a2f19d5b625`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-27672`	vulnerable	2026-06-08 05:42:43.105653	Details available When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure. Published: 2023-02-14T19:34:54.028Z Updated: 2026-04-13T19:53:49.458Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1045 https://security.gentoo.org/glsa/202402-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23824`	vulnerable	2026-06-08 05:40:59.070745	Details available IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure. Published: 2022-11-09T20:48:06.826Z Updated: 2025-02-13T16:32:23.589Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1040 http://www.openwall.com/lists/oss-security/2022/11/10/2 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTQMPJC5N6XJYQ232OZFLK47HVZNRBY3/ https://www.debian.org/security/2023/dsa-5378	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23817`	not_vulnerable	2026-06-08 05:40:58.596170	Details available Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation. Published: 2024-08-13T16:51:45.468Z Updated: 2026-05-15T03:03:25.036Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46778`	vulnerable	2026-06-08 05:38:05.781259	Details available Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information. Published: 2022-08-09T20:20:12.911Z Updated: 2024-09-17T00:36:13.880Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1039	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26393`	vulnerable	2026-06-08 05:30:44.341617	Details available Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality. Published: 2022-11-09T20:44:25.517Z Updated: 2024-09-16T21:58:26.137Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26392`	vulnerable	2026-06-08 05:30:44.330906	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26371`	vulnerable	2026-06-08 05:30:43.855889	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26354`	vulnerable	2026-06-08 05:30:43.582626	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26346`	vulnerable	2026-06-08 05:30:43.383116	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12931`	vulnerable	2026-06-08 05:17:59.732547	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12930`	vulnerable	2026-06-08 05:17:59.689287	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.