GCVE - cpe:2.3:o:amd:ryzen_5_3450u_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_5_3450u_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Ryzen 5 3450U Firmware (`9b69cb53-92cd-5c3f-a770-ee3ec1a557a5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-23817`	not_vulnerable	2026-06-08 05:40:58.593325	Details available Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation. Published: 2024-08-13T16:51:45.468Z Updated: 2026-05-15T03:03:25.036Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26393`	vulnerable	2026-06-08 05:30:44.341476	Details available Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality. Published: 2022-11-09T20:44:25.517Z Updated: 2024-09-16T21:58:26.137Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26392`	vulnerable	2026-06-08 05:30:44.330647	Details available Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA. Published: 2022-11-09T20:44:26.258Z Updated: 2024-09-16T20:51:46.791Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26371`	vulnerable	2026-06-08 05:30:43.856142	Details available A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. Published: 2023-05-09T18:59:16.122Z Updated: 2025-01-28T15:46:02.389Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26354`	vulnerable	2026-06-08 05:30:43.583116	Details available Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity. Published: 2023-05-09T18:58:37.664Z Updated: 2025-01-28T15:50:35.057Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26346`	vulnerable	2026-06-08 05:30:43.375288	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12931`	vulnerable	2026-06-08 05:17:59.732100	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12930`	vulnerable	2026-06-08 05:17:59.684409	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.