Amd Ryzen 5000 Series vulnerabilities

CVE-2021-26316 [HIGH] CWE-20 CVE-2021-26316: Failure to validate the communication buffer and communication service in the BIOS may allow an atta Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.

CVE-2021-26346 [MEDIUM] CWE-190 CVE-2021-26346: Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attack Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

CVE-2021-46795 [MEDIUM] CWE-367 CVE-2021-46795: A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.

CVE-2021-26347 [MEDIUM] CWE-1284 CVE-2021-26347: Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attack Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

CVE-2021-39298 [HIGH] CVE-2021-39298: A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacke A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.