Not rated
CVE-2023-20555 Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an…
Description
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 | Versions not published | |
| Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4 | Versions not published | |
| Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 | Versions not published | |
| Ryzen™ 7000 Series Processors “Raphael” | Versions not published | |
| Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” | Versions not published | |
| Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” FP5 | Versions not published | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 | Versions not published | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | Versions not published | |
| Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Picasso” | Versions not published |
Show the 12 other branches Hide the 12 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 | Versions not published | |
| Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | Versions not published | |
| Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” | Versions not published | |
| Ryzen™ 6000 Series Mobile Processors "Rembrandt" | Versions not published | |
| Ryzen™ 7030 Series Mobile Processors “Barcelo” | Versions not published | |
| Ryzen™ 7020 Series Mobile Processors “Mendocino” | Versions not published | |
| ryzen_3000_series_desktop_processors | 1-1.0.0.A | No fix stated |
| ryzen_5000_series_desktop_processors | Versions not published | |
| ryzen_7000_series_desktop_processors | 1.0.0.6 | No fix stated |
| athlon_3000g | 1.2.0.A | No fix stated |
| athlon_3000g | 1.0.0.A | No fix stated |
| ryzen_4000_series_desktop_processors_with_radeon_graphics | 1.2.0.A | No fix stated |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
The 11 CVEs of Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 →
CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access…
Not rated
CVE-2021-46794
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…
7.5
High
CVE-2021-46773
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…
8.8
High
CVE-2021-46756
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an…
9.1
Critical