AMD Ryzen™ 5000 Series Desktop Processors at a glance
- Last 12 months
- 21
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 3 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 2 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 3 | 0 |
| May 2026 | 7 | 0 |
| Apr 2026 | 1 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 5 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 8 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 1 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 8 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
49 results · Feed
-
Medium 6.0
An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and pot…
-
Medium 6.9
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access …
-
Medium 4.6
Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disa…
-
High 7.4
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI f…
-
High 7.7
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resul…
-
Medium 5.6
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…
-
Low 1.8
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…
-
High 7.1
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user s…
-
Medium 6.9
Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with lo…
-
Low 1.8
A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside t…
-
High 8.6
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location poten…
-
Medium 6.9
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer ov…
-
High 8.5
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achie…
-
Medium 6.3
Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the e…
-
Medium 6.0
Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sen…
-
High 7.1
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacke…
-
Medium 6.0
Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with acce…
-
High 8.7
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and…
-
High 7.1
Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmappin…
-
Medium 4.8
Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could a…
-
High 7.0
Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify exe…
-
Medium 6.1
An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resultin…
-
High 7.5
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, …
-
Medium 4.4
Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt…
-
High 7.5
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary …
-
Low 2.5
An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially…
-
Low 2.8
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution en…
-
Medium 4.1
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious user…
-
Low 3.2
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RD…
-
Low 3.8
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers spec…
-
Low 3.8
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a r…
-
Medium 6.4
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator pr…
-
Medium 5.5
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a …
-
High 7.5
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to…
-
Medium 5.0
Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory loca…
-
High 7.5
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to…
-
High 7.5
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to…
-
Medium 5.7
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory…
-
High 8.2
SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to over…
-
High 8.2
Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading…