Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-20596

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4

Default version status: unaffected

  • various affected

AMD Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael”

Default version status: unaffected

  • various affected

AMD Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” X3D

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”

Default version status: unaffected

  • various affected

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Formerly codenamed “Phoenix”

Default version status: unaffected

  • various affected

References