Ryzen 3800xt
Vendor:
First CVE: May 9, 2023 · Active for 3 years
11
Total CVEs
More Total CVEs than 89% of tracked products
11.0
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ryzen 3800xt over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 9, 2023
3 years ago
Most Recent CVE
Sep 20, 2023
1,038 days ago
CVE Severity & Scoring
Ryzen 3800xt11 CVEs
36%
45%
18%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (18.2%)
Network8 (72.7%)
Unknown0 (0.0%)
Physical1 (9.1%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (90.9%)
High1 (9.1%)
Unknown0 (0.0%)
User Interaction
None11 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low2 (18.2%)
High1 (9.1%)
None8 (72.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-46754CRITICAL Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive inf | May 9, 2023 | 9.1 | 29 | NO | NO |
CVE-2021-46753CRITICAL Failure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers may allow an attacker with a
malicious Uapp or ABL to map the ASP sensor fusion hu | May 9, 2023 | 9.1 | 28 | NO | NO |
CVE-2021-46773HIGH Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.
| May 9, 2023 | 8.8 | 26 | NO | NO |
CVE-2021-46794HIGH Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data a | May 9, 2023 | 7.5 | 23 | NO | NO |
CVE-2021-46749HIGH Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data a | May 9, 2023 | 7.5 | 23 | NO | NO |
CVE-2021-46765HIGH Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.
| May 9, 2023 | 7.5 | 22 | NO | NO |
CVE-2021-46792MEDIUM Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bound | May 9, 2023 | 5.9 | 20 | NO | NO |
CVE-2021-46759MEDIUM Improper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an attacker with physical access and
control of a Uapp that runs under the bootloader to reve | May 9, 2023 | 6.1 | 20 | NO | NO |
CVE-2021-46755HIGH Failure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker
with a malicious bootloader to exhaust the SysHub resourc | May 9, 2023 | 7.5 | 19 | NO | NO |
CVE-2023-20597MEDIUM Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. | Sep 20, 2023 | 5.5 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Ryzen 3800xt
Top CWEs
Versions
No cataloged versions.