7.5
High
CVE-2023-20524 An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an…
Description
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 2nd Gen AMD EPYC™ | Versions not published | |
| 3rd Gen AMD EPYC™ | Versions not published |
Other CVEs of 2nd Gen AMD EPYC™
The 19 CVEs of 2nd Gen AMD EPYC™ →
CVE-2023-20520
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…
9.8
Critical
CVE-2021-46775
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,…
6.8
Medium
CVE-2021-46769
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA…
8.8
High
CVE-2021-46764
Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the…
7.5
High