3.3
Low
CVE-2023-20521 TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory…
Description
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 | Versions not published | |
| Ryzen™ Threadripper™ 2000 Series Processors “Colfax” | Versions not published | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 | Versions not published | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | Versions not published | |
| Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 | Versions not published | |
| 1st Gen AMD EPYC™ Processors | Versions not published | |
| 2nd Gen AMD EPYC™ Processors | Versions not published | |
| 3rd Gen AMD EPYC™ Processors | Versions not published | |
| AMD EPYC™ Embedded 3000 | Versions not published |
Show the 5 other branches Hide the 5 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD EPYC™ Embedded 7002 | Versions not published | |
| AMD EPYC™ Embedded 7003 | Versions not published | |
| AMD Ryzen™ Embedded R1000 | Versions not published | |
| AMD Ryzen™ Embedded R2000 | Versions not published | |
| AMD Ryzen™ Embedded V1000 | Versions not published |