7.3
Élevée
CVE-2022-23817 Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious…
Description
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD Ryzen™ 3000 Series Desktop Processors | Versions non publiées | |
| AMD Ryzen™ 5000 Series Desktop Processors | Versions non publiées | |
| AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ 7000 Series Desktop Processors | Versions non publiées | |
| AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ Threadripper™ 3000 Series Processors | Versions non publiées | |
| AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | Versions non publiées | |
| AMD Ryzen™ Threadripper™ PRO 5000WX Processors | Versions non publiées |
Afficher les 48 autres branches Masquer les 48 autres branches
Autres CVE de AMD Ryzen™ 3000 Series Desktop Processors
Les 43 CVE de AMD Ryzen™ 3000 Series Desktop Processors →
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
Élevée
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially…
7.7
Élevée
CVE-2023-20572
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against…
5.6
Moyenne
CVE-2023-20540
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against…
1.8
Faible