GCVE - cpe:2.3:o:amd:ryzen_5_5500_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_5_5500_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 5 5500 Firmware (`8e47731a-d3b6-53fb-aede-8a2e236c277b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20589`	vulnerable	2026-06-08 05:52:45.313780	fTPM Voltage Fault Injection An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. Published: 2023-08-08T17:04:17.854Z Updated: 2024-11-13T15:59:15.464Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4005	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23817`	not_vulnerable	2026-06-08 05:40:58.637652	Details available Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation. Published: 2024-08-13T16:51:45.468Z Updated: 2026-05-15T03:03:25.036Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26392`	vulnerable	2026-06-08 05:30:44.308244	Details available Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA. Published: 2022-11-09T20:44:26.258Z Updated: 2024-09-16T20:51:46.791Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26371`	vulnerable	2026-06-08 05:30:43.852422	Details available A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. Published: 2023-05-09T18:59:16.122Z Updated: 2025-01-28T15:46:02.389Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26365`	vulnerable	2026-06-08 05:30:43.722425	Details available Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents. Published: 2023-05-09T18:58:57.236Z Updated: 2025-01-28T15:47:24.862Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26354`	vulnerable	2026-06-08 05:30:43.564164	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26346`	vulnerable	2026-06-08 05:30:43.386049	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26316`	vulnerable	2026-06-08 05:30:42.413526	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12931`	vulnerable	2026-06-08 05:17:59.726706	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12930`	vulnerable	2026-06-08 05:17:59.613530	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.