fr Sign in

Not rated

CVE-2023-20594 Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via…

Description

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Affected products and versions

Product	Affected versions	Fixed in
Ryzen™ 3000 Series Desktop Processors “Matisse”	Versions not published
Ryzen™ 5000 Series Desktop Processors “Vermeer”	Versions not published
Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”	Versions not published
Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” AM4	Versions not published
Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT	Versions not published
Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3	Versions not published
Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS SP3	Versions not published
Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6	Versions not published
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”	Versions not published

Show the 8 other branches

Product	Affected versions	Fixed in
Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”	Versions not published
Ryzen™ 6000 Series Mobile Processors with Radeon™ Graphics "Rembrandt"	Versions not published
Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics "Rembrandt-R"	Versions not published
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics "Barcelo"	Versions not published
Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”	Versions not published
3rd Gen AMD EPYC™ Processors	Versions not published
AMD Ryzen™ Embedded 7000	Versions not published
AMD RyzenTM Embedded V3000	Versions not published

References

www.amd.com www.amd.com

Timeline

Published September 20, 2023
Last modified June 27, 2025

The 3 CVEs of Ryzen™ 3000 Series Desktop Processors “Matisse” →

CVE-2022-23821 Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to… Not rated CVE-2023-20597 Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via… Not rated

Track this CVE