CVE-2022-23821: AMD Athlon 3015ce Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

Affected products

  • AMD Athlon 3015ce Firmware: version pollockpi-ft5_1.0.0.5 only
  • AMD Athlon 3015e Firmware: version pollockpi-ft5_1.0.0.5 only
  • AMD Ryzen 3 3100 Firmware: version comboam4_pi_1.0.0.9 only; version comboam4_v2_pi_1.2.0.8 only
  • AMD Ryzen 3 3200u Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 3 3250c Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 3 3250u Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 3 3300u Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 3 3300x Firmware: version comboam4_pi_1.0.0.9 only; version comboam4_v2_pi_1.2.0.8 only
  • AMD Ryzen 3 3350u Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 3 4300u Firmware: version renoirpi-fp6_1.0.0.9 only
  • AMD Ryzen 3 5100 Firmware: version comboam4v2_pi_1.2.0.8 only
  • AMD Ryzen 3 5125c Firmware: version cezannepi-fp6_1.0.0.b only
  • AMD Ryzen 3 5400u Firmware: version cezannepi-fp6_1.0.0.b only
  • AMD Ryzen 3 5425u Firmware: version cezannepi-fp6_1.0.0.b only
  • AMD Ryzen 3 7335u Firmware: version rembrandtpi-fp7_1.0.0.2 only
  • AMD Ryzen 5 3450u Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 5 3500 Firmware: version comboam4_pi_1.0.0.9 only; version comboam4_v2_pi_1.2.0.8 only
  • AMD Ryzen 5 3500c Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 5 3500u Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 5 3500x Firmware: version comboam4_pi_1.0.0.9 only; version comboam4_v2_pi_1.2.0.8 only
  • AMD Ryzen 5 3550h Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 5 3580u Firmware: version picassopi-fp5_1.0.0.e only
  • AMD Ryzen 5 3600 Firmware: version comboam4_pi_1.0.0.9 only; version comboam4_v2_pi_1.2.0.8 only
  • AMD Ryzen 5 3600x Firmware: version comboam4_pi_1.0.0.9 only; version comboam4_v2_pi_1.2.0.8 only
  • AMD Ryzen 5 3600xt Firmware: version comboam4_pi_1.0.0.9 only; version comboam4_v2_pi_1.2.0.8 only
  • and 83 more

Published 2023-11-14. Last modified 2026-06-17.