Описание
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
Затрагиваемое ПО
Amd Athlon silver 3050u firmwareAmd Athlon silver 3050uAmd Athlon gold 3150u firmwareAmd Athlon gold 3150uAmd Ryzen 7 3780u firmwareAmd Ryzen 7 3780uAmd Ryzen 7 3750h firmwareAmd Ryzen 7 3750hAmd Ryzen 7 pro 3700u firmwareAmd Ryzen 7 pro 3700uAmd Ryzen 7 3700u firmwareAmd Ryzen 7 3700uAmd Ryzen 5 3580u firmwareAmd Ryzen 5 3580uAmd Ryzen 5 3550h firmwareAmd Ryzen 5 3550hAmd Ryzen 5 3500u firmwareAmd Ryzen 5 3500uAmd Ryzen 3 3300u firmwareAmd Ryzen 3 3300uAmd Ryzen 3 3250u firmwareAmd Ryzen 3 3250uAmd Ryzen 3 3200u firmwareAmd Ryzen 3 3200uAmd Athlon gold pro 3150g firmware
CVSS
| Балл | 7.5 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
Источники
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html