GCVE - cpe:2.3:o:amd:ryzen_9_5900_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_9_5900_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 9 5900 Firmware (`159f15b5-65cd-52c7-8856-9cf1432c1f2d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20589`	vulnerable	2026-06-08 05:52:45.302504	fTPM Voltage Fault Injection An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. Published: 2023-08-08T17:04:17.854Z Updated: 2024-11-13T15:59:15.464Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4005	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23817`	not_vulnerable	2026-06-08 05:40:58.632709	Details available Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation. Published: 2024-08-13T16:51:45.468Z Updated: 2026-05-15T03:03:25.036Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26392`	vulnerable	2026-06-08 05:30:44.308846	Details available Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA. Published: 2022-11-09T20:44:26.258Z Updated: 2024-09-16T20:51:46.791Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26371`	vulnerable	2026-06-08 05:30:43.851893	Details available A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. Published: 2023-05-09T18:59:16.122Z Updated: 2025-01-28T15:46:02.389Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26365`	vulnerable	2026-06-08 05:30:43.721637	Details available Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents. Published: 2023-05-09T18:58:57.236Z Updated: 2025-01-28T15:47:24.862Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26354`	vulnerable	2026-06-08 05:30:43.563482	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26346`	vulnerable	2026-06-08 05:30:43.412678	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26316`	vulnerable	2026-06-08 05:30:42.457800	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12931`	vulnerable	2026-06-08 05:17:59.727170	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12930`	vulnerable	2026-06-08 05:17:59.623311	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.