Skip to content
Sign in
6.5 Medium

CVE-2023-20525 Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the…

Description

Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.

Affected products and versions

Product Affected versions Fixed in
2nd Gen EPYC Versions not published
3rd Gen EPYC Versions not published

Other CVEs of 2nd Gen EPYC

The 14 CVEs of 2nd Gen EPYC →
CVE-2023-20532 Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in… 5.3 Medium CVE-2023-20531 Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid… 7.5 High CVE-2023-20529 Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value… 7.5 High CVE-2023-20528 Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C… 2.4 Low
Track this CVE