5.3
Medium
CVE-2022-23814 Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest…
Description
Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 3rd Gen EPYC | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of 3rd Gen EPYC
The 26 CVEs of 3rd Gen EPYC →
CVE-2023-20532
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in…
5.3
Medium
CVE-2023-20531
Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid…
7.5
High
CVE-2023-20530
Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially…
7.5
High
CVE-2023-20529
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value…
7.5
High