AMD Ryzen 3 2300x Firmware vulnerabilities

2 CVEs affecting AMD Ryzen 3 2300x Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26354, published 2023-05-09.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-27672, published 2023-03-01. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
• CVE-2021-26354, published 2023-05-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to…