Ryzen 5300ge
Vendor:
First CVE: Nov 16, 2021 · Active for 4 years
16
Total CVEs
More Total CVEs than 92% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 42% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ryzen 5300ge over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 16, 2021
4 years ago
Most Recent CVE
Sep 20, 2023
1,041 days ago
CVE Severity & Scoring
Ryzen 5300ge16 CVEs
38%
50%
13%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local7 (43.8%)
Network8 (50.0%)
Unknown0 (0.0%)
Physical1 (6.3%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (93.8%)
High1 (6.3%)
Unknown0 (0.0%)
User Interaction
None16 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low6 (37.5%)
High2 (12.5%)
None8 (50.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-46754CRITICAL Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive inf | May 9, 2023 | 9.1 | 29 | NO | NO |
CVE-2021-46753CRITICAL Failure to validate the length fields of the ASP
(AMD Secure Processor) sensor fusion hub headers may allow an attacker with a
malicious Uapp or ABL to map the ASP sensor fusion hu | May 9, 2023 | 9.1 | 28 | NO | NO |
CVE-2021-46773HIGH Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.
| May 9, 2023 | 8.8 | 26 | NO | NO |
CVE-2021-26386HIGH A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code executio | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2021-26317HIGH Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution. | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2021-46794HIGH Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data a | May 9, 2023 | 7.5 | 23 | NO | NO |
CVE-2021-46749HIGH Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data a | May 9, 2023 | 7.5 | 23 | NO | NO |
CVE-2021-46765HIGH Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.
| May 9, 2023 | 7.5 | 22 | NO | NO |
CVE-2020-12965HIGH When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data le | Feb 4, 2022 | 7.5 | 22 | NO | NO |
CVE-2022-29277HIGH Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccess | Nov 15, 2022 | 8.8 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Ryzen 5300ge
Top CWEs
Versions
No cataloged versions.