Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality,

Description

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 7000 Series Desktop Processors

Default version status: affected

  • ComboAM5 1.0.8.0unaffected

AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected
  • ComboAM4PI 1.0.0.Bunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics

Default version status: affected

  • ComboAM5 1.0.8.0unaffected

AMD AMD Ryzen™ Threadripper™ 3000 Series Processors

Default version status: affected

  • CastlePeakPI-SP3r3 1.0.0.Cunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: affected

  • CastlePeakWSPI-sWRX8 1.0.0.Eunaffected
  • ChagallWSPI-sWRX8 1.0.0.9unaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.7unaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Pollock-FT5 1.0.0.7unaffected

AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Default version status: affected

  • Picasso-FP5 1.0.1.1unaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6 1.0.0.Dunaffected

AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Default version status: affected

  • Cezanne-FP6 1.0.1.0unaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6 1.0.0.6unaffected

AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7 1.0.0.9bunaffected

AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7 1.0.0.9bunaffected

AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7 1.0.8.0unaffected

AMD AMD Ryzen™ 7000 Series Mobile Processors

Default version status: affected

  • DragonRangeFL1PI 1.0.0.3bunaffected

AMD AMD Ryzen™ Embedded R1000

Default version status: affected

  • EmbeddedPI-FP5 1.2.0.Cunaffected

AMD AMD Ryzen™ Embedded R2000

Default version status: affected

  • EmbeddedR2KPI-FP5 1.0.0.3unaffected

AMD AMD Ryzen™ Embedded 5000

Default version status: affected

  • EmbAM4PI 1.0.0.5unaffected

AMD AMD Ryzen™ Embedded 7000

Default version status: affected

  • EmbeddedAM5PI 1.0.0.0unaffected

AMD AMD Ryzen™ Embedded V2000

Default version status: affected

  • EmbeddedPI-FP6 1.0.0.9unaffected

AMD AMD Ryzen™ Embedded V1000

Default version status: affected

  • No Fix Plannedaffected

AMD AMD Ryzen™ Embedded V3000

Default version status: affected

  • Embedded-PIFP7r2 1.0.0.8unaffected

References