Skip to content
fr Sign in
1.9 Low

CVE-2023-20526 Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose…

Description

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

Affected products and versions

Product Affected versions Fixed in
AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax” Versions not published
1st Gen AMD EPYC™ Processors Versions not published
2nd Gen AMD EPYC™ Processors Versions not published
3rd Gen AMD EPYC™ Processors Versions not published
AMD EPYC™ Embedded 3000 Versions not published
AMD EPYC™ Embedded 7002 Versions not published
AMD EPYC™ Embedded 7003 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”

The 2 CVEs of AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax” →
CVE-2022-23820 Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to… 7.5 High
Track this CVE