Skip to content
OpenAdvisories
Medium · 4.4 CVE-2024-21970 EUVD-2024-19576GHSA-wph7-6jhm-2x56

Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potent…

Published Sep 6, 2025 · Updated Sep 8, 2025 · Assigned by AMD

Vendor: AMD Product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 3000 Series Desktop Processors Product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 5000 Series Desktop Processors Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7000 Series Desktop Processors Product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Product: AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics Product: AMD Ryzen™ 8000 Series Desktop Processors Product: AMD Ryzen™ Embedded 5000 Series Processors Product: AMD Ryzen™ Embedded 7000 Series Processors Product: AMD Ryzen™ Embedded R1000 Series Processors Product: AMD Ryzen™ Embedded R2000 Series Processors Product: AMD Ryzen™ Embedded V1000 Series Processors Product: AMD Ryzen™ Embedded V2000 Series Processors Product: AMD Ryzen™ Embedded V3000 Series Processors Product: AMD Ryzen™ Threadripper™ 3000 Processors Product: AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors Product: AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors Product: Renoir Cezanne Raven Ridge Raven Ridge 2 Picasso Summit Pinnacle Ridge Matisse Vermeer

Description

Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity.

Affected products

VendorProductAffectedFixed
AMD AMD Ryzen™ Threadripper™ 3000 Processors — CastlePeakPI-SP3r3 1.0.0.C
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors — ChagallWSPI-sWRX8-1.0.0.9
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors — CastlePeakWSPI-sWRX8 1.0.0.E
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics — Picasso-FP5 1.0.1.2
AMD Renoir Cezanne Raven Ridge Raven Ridge 2 Picasso Summit Pinnacle Ridge Matisse Vermeer — ComboAM4v2PI_1.2.0.D
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics — ComboAM4PI_1.0.0.F
AMD AMD Ryzen™ 8000 Series Desktop Processors — ComboAM5 1.2.0.0
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics — RenoirPI-FP6_1.0.0.E
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics — RembrandtPI-FP7_1.0.0.B
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics — MendocinoPI-FT6_1.0.0.6
AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics — DragonRangeFL1 1.0.0.3d
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics — RembrandtPI-FP7_1.0.0.B
AMD AMD Ryzen™ 7000 Series Desktop Processors — ComboAM5 1.2.0.0
AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics — CezannePI-FP6_1.0.1.1
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics — CezannePI-FP6_1.0.1.1
AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics — Picasso-FP5 1.0.1.2
AMD AMD Ryzen™ 3000 Series Desktop Processors — ComboAM4PI_1.0.0.F
AMD AMD Ryzen™ 5000 Series Desktop Processors — ComboAM4PI_1.0.0.F
AMD AMD Ryzen™ Embedded R1000 Series Processors — EmbeddedPI-FP5 1.2.0.E
AMD AMD Ryzen™ Embedded R2000 Series Processors — EmbeddedR2KPI-FP5 1005
AMD AMD Ryzen™ Embedded 7000 Series Processors — EmbeddedAM5PI 1.0.0.3
AMD AMD Ryzen™ Embedded 5000 Series Processors — EmbAM4PI 1.0.0.7
AMD AMD Ryzen™ Embedded V1000 Series Processors — EmbeddedPI-FP5 1.2.0.E
AMD AMD Ryzen™ Embedded V2000 Series Processors — EmbeddedPI-FP6_1.0.0.B
AMD AMD Ryzen™ Embedded V3000 Series Processors — Embedded-PI_FP7r2 100A

Advisories 1

References