AMD Ryzen™ 3000 Series Desktop Processors “Matisse”

• CVE-2022-23821 Unrated Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. 1.0%
• CVE-2023-20533 Medium 6.1 Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. 0.5%
• CVE-2022-23820 High 7.5 Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. 0.7%
• CVE-2021-46774 Medium 6.7 Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. 0.5%
• CVE-2023-20597 Unrated Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. 0.2%
• CVE-2023-20594 Unrated Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. 0.2%