Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-20555

Insufficient input validation in

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4

Default version status: affected

  • various affected

AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4

Default version status: affected

  • various affected

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” AM4

Default version status: affected

  • various affected

AMD Ryzen™ 7000 Series Processors “Raphael”

Default version status: affected

  • various affected

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso”

Default version status: affected

  • various affected

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” FP5

Default version status: affected

  • various affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5

Default version status: affected

  • various affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”

Default version status: affected

  • various affected

AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Picasso”

Default version status: affected

  • various affected

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6

Default version status: affected

  • various affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”

Default version status: affected

  • various affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”

Default version status: affected

  • various affected

AMD Ryzen™ 6000 Series Mobile Processors "Rembrandt"

Default version status: affected

  • various affected

AMD Ryzen™ 7030 Series Mobile Processors “Barcelo”

Default version status: affected

  • various affected

AMD Ryzen™ 7020 Series Mobile Processors “Mendocino”

Default version status: affected

  • various affected

References