AMD Ryzen 5 55003xd Firmware vulnerabilities

2 CVEs affecting AMD Ryzen 5 55003xd Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23821, published 2023-11-14.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23821, published 2023-11-14. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
• CVE-2022-23820, published 2023-11-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.