AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
En bref
- Source
- NVD
- EPSS
- EPSS 0.16 % · centile 5 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Modified
Rechercher sur…
Description
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
Faiblesses (CWE)
- CWE-787 — Écriture hors limites
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H | AMD |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H | NVD · psirt@amd.com (Secondary) |
| CVSS 3.1 | HIGH 8.2 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2022-28744
- GCVE · GCVE-0-2022-23815
Configurations affectées (CPE NVD)
cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_pro_3700u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:*< picassopi-fp5_1.0.0.ecpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| AMD · AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | affected various |
| AMD · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | unaffected PicassoPI-FP5 1.0.0.F |
| AMD · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | unaffected PollockPI-FT5 1.0.0.5 |
| AMD · AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics | unaffected PicassoPI-FP5 1.0.0.E |
| AMD · AMD RyzenTM Embedded R1000 | unaffected EmbeddedPI-FP5 1.2.0.A |
| AMD · AMD RyzenTM Embedded R2000 | unaffected EmbeddedR2KPI-FP5 1.0.0.2 |
| AMD · AMD RyzenTM Embedded V1000 | unaffected EmbeddedPI-FP5 1.2.0.A |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |