Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2023-20577

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD 2nd Gen AMD EPYC™ Processors

Default version status: affected

  • RomePI 1.0.0.Hunaffected

AMD 3rd Gen AMD EPYC™ Processors

Default version status: affected

  • MilanPI 1.0.0.Cunaffected

AMD 4th Gen AMD EPYC™ Processors

Default version status: affected

  • GenoaPI 1.0.0.8unaffected

AMD AMD Instinct™ MI300A

Default version status: affected

  • MI300 SR5 PI 1.0.0.1unaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2 1.2.0.Bunaffected
  • ComboAM4 1.0.0.Bunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2 1.2.0.Bunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2 1.2.0.Bunaffected

AMD AMD Ryzen™ 7000 Series Processors

Default version status: affected

  • ComboAM5 1.0.0.7bunaffected

AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2 1.2.0.Bunaffected
  • ComboAM4 1.0.0.Bunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2 1.2.0.Bunaffected

AMD AMD Ryzen™ Threadripper™ 3000 Series Processors

Default version status: affected

  • CastlePeakPI-SP3r3 1.0.0.Aunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.7unaffected
  • CastlePeakWSPI-sWRX8 1.0.0.Cunaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000WX Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.7unaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.1.0unaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PollockPI-FT5 1.0.0.6unaffected

AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.1.0unaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6 1.0.0.Dunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.Funaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.Funaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6 1.0.0.6unaffected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7 1.0.0.9bunaffected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7 1.0.0.9bunaffected

AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.Funaffected

AMD AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.Funaffected

AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7 1.0.0.2unaffected

AMD AMD Ryzen™ 7045 Series Mobile Processors

Default version status: affected

  • DragonRangeFL1PI 1.0.0.3aunaffected

AMD AMD EPYC™ Embedded 3000

Default version status: affected

  • Snowyowl PI 1.1.0.Bunaffected

AMD AMD EPYC™ Embedded 7002

Default version status: affected

  • EmbRomePI-SP3 1.0.0.Bunaffected

AMD AMD EPYC™ Embedded 7003

Default version status: affected

  • EmbMilanPI-SP3 1.0.0.8unaffected

AMD AMD EPYC™ Embedded 9003

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.3unaffected

AMD AMD Ryzen™ Embedded R1000

Default version status: affected

  • EmbeddedPI-FP5 1.2.0.Aunaffected

AMD AMD Ryzen™ Embedded R2000

Default version status: affected

  • EmbeddedPI-FP5 1.0.0.2unaffected

AMD AMD Ryzen™ Embedded 5000

Default version status: affected

  • EmbAM4PI 1.0.0.4unaffected

AMD AMD Ryzen™ Embedded V1000

Default version status: affected

  • EmbeddedPI-FP5 1.2.0.Aunaffected

AMD AMD Ryzen™ Embedded V2000

Default version status: affected

  • EmbeddedPI-FP6 1.0.0.9unaffected

AMD AMD Ryzen™ Embedded V3000

Default version status: affected

  • EmbeddedPI-FP7r2 1.0.0.8unaffected

References