Amd Ryzen 3 3300 Firmware vulnerabilities

3 known vulnerabilities affecting amd/ryzen_3_3300_firmware.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2023-20594MEDIUMCVSS 4.4vcomboam4pi_1.0.0.9vcomboam4v2pi_1.2.0.82023-09-20

CVE-2023-20594 [MEDIUM] CWE-824 CVE-2023-20594: Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

CVE-2023-20597MEDIUMCVSS 5.5vcomboam4pi_1.0.0.9vcomboam4v2pi_1.2.0.82023-09-20

CVE-2023-20597 [MEDIUM] CWE-824 CVE-2023-20597: Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

CVE-2023-20555HIGHCVSS 7.8fixed in comboam4_pi_v1_1.0.0.afixed in comboam4v2_pi_1.2.0.a2023-08-08

CVE-2023-20555 [HIGH] CWE-787 CVE-2023-20555: Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.