Ryzen 7 3750H Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2024-08-13	CVE-2021-26367	Unspecified vulnerability in AMD products A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability. local low complexity amd	6.0
2024-08-13	CVE-2022-23815	Out-of-bounds Write vulnerability in AMD products Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution. local low complexity amd CWE-787	8.2
2024-02-13	CVE-2023-20579	Unspecified vulnerability in AMD products Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability. local low complexity amd	6.0
2023-11-14	CVE-2022-23820	Improper Input Validation vulnerability in AMD products Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. network low complexity amd CWE-20 critical	9.8
2023-11-14	CVE-2022-23821	Unspecified vulnerability in AMD products Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. network low complexity amd critical	9.8
2023-11-14	CVE-2023-20521	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in AMD products TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service. high complexity amd CWE-367	5.7
2023-08-08	CVE-2023-20555	Out-of-bounds Write vulnerability in AMD products Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. local low complexity amd CWE-787	7.8
2023-05-09	CVE-2021-26354	Classic Buffer Overflow vulnerability in AMD products Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity. local low complexity amd CWE-120	5.5
2023-05-09	CVE-2021-26371	Unspecified vulnerability in AMD products A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure. local low complexity amd	5.5
2023-03-01	CVE-2022-27672	Unspecified vulnerability in AMD products When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure. local high complexity amd	4.7