Skip to content
Sign in
8.8 High

CVE-2023-20558 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler…

Description

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.

Affected products and versions

Product Affected versions Fixed in
Ryzen™ 2000 Series Versions not published
Ryzen™ 3000 Series Versions not published
Ryzen™ 4000 Series Versions not published
Ryzen™ 5000 Series Versions not published
2nd Gen AMD Ryzen™ Threadripper™ Processor Versions not published
3rd Gen AMD Ryzen™ Threadripper™ Processors Versions not published
Ryzen™ Threadripper™ PRO Processor Versions not published

Other CVEs of Ryzen™ 2000 Series

The 2 CVEs of Ryzen™ 2000 Series →
CVE-2023-20559 Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler… 8.8 High
Track this CVE