Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-20597

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Description

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Ryzen™ 3000 Series Desktop Processors “Matisse”

Default version status: affected

  • variousaffected

AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”

Default version status: affected

  • variousaffected

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”

Default version status: affected

  • variousaffected

AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT

Default version status: affected

  • variousaffected

AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3

Default version status: affected

  • variousaffected

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS SP3

Default version status: affected

  • variousaffected

AMD Ryzen™ 6000 Series Mobile Processors with Radeon™ Graphics "Rembrandt"

Default version status: affected

  • variousaffected

AMD Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics "Rembrandt-R"

Default version status: affected

  • variousaffected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics "Barcelo"

Default version status: affected

  • variousaffected

AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”

Default version status: affected

  • variousaffected

AMD AMD EPYC™ Embedded 7003

Default version status: affected

  • EmbMilanPI-SP3 1.0.0.6unaffected

AMD AMD Ryzen™ Embedded 5000

Default version status: affected

  • EmbAM4PI 1.0.0.2unaffected

AMD AMD Ryzen™ Embedded V2000

Default version status: affected

  • EmbeddedPI-FP6 1.0.0.8unaffected

AMD AMD Ryzen™ Embedded V3000

Default version status: affected

  • EmbeddedPI-FP7r2 1.0.0.4unaffected

References