Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service or potentially limited leakage of information about out-of-bounds memory contents.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HAmd 3015ce
HWAmdall versionsAmd 3015ce Firmware
OSAmd< pollockpi-ft5_1.0.0.3Amd 3015e
HWAmdall versionsAmd 3015e Firmware
OSAmd< pollockpi-ft5_1.0.0.3Amd Ryzen 3 2200g
HWAmdall versionsAmd Ryzen 3 2200ge
HWAmdall versionsAmd Ryzen 3 2200ge Firmware
OSAmdall versionsAmd Ryzen 3 2200g Firmware
OSAmdall versionsAmd Ryzen 3 2200u
HWAmdall versionsAmd Ryzen 3 2200u Firmware
OSAmdall versionsAmd Ryzen 3 2300u
HWAmdall versionsAmd Ryzen 3 2300u Firmware
OSAmdall versionsAmd Ryzen 3 3200g
HWAmdall versionsAmd Ryzen 3 3200ge
HWAmdall versionsAmd Ryzen 3 3200ge Firmware
OSAmdall versionsAmd Ryzen 3 3200g Firmware
OSAmdall versionsAmd Ryzen 3 3200u
HWAmdall versionsAmd Ryzen 3 3200u Firmware
OSAmd< picassopi-fp5_1.0.0.dAmd Ryzen 3 3250c
HWAmdall versionsAmd Ryzen 3 3250c Firmware
OSAmd< picassopi-fp5_1.0.0.dAmd Ryzen 3 3250u
HWAmdall versionsAmd Ryzen 3 3250u Firmware
OSAmd< picassopi-fp5_1.0.0.dAmd Ryzen 3 5300g
HWAmdall versionsAmd Ryzen 3 5300ge
HWAmdall versionsAmd Ryzen 3 5300ge Firmware
OSAmd< cezannepi-fp6_1.0.0.8Amd Ryzen 3 5300g Firmware
OSAmd< cezannepi-fp6_1.0.0.8Amd Ryzen 3 5300u
HWAmdall versionsAmd Ryzen 3 5300u Firmware
OSAmd< cezannepi-fp6_1.0.0.8Amd Ryzen 3 Pro 2100ge
HWAmdall versionsAmd Ryzen 3 Pro 2100ge Firmware
OSAmdall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
Related vulnerabilities
CVE-2023-20596CRITICAL9.8PL ✓same product
Błąd walidacji danych wejściowych w SMM Supervisor procesorów AMD Ryzen
CVE-2022-23821CRITICAL9.8PL ✓same product
Błąd kontroli dostępu w SMM AMD umożliwiający zapis do SPI ROM i RCE
CVE-2022-23815HIGH7.5same product
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting ...
CVE-2023-20563HIGH7.8same product
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable esca...
CVE-2022-23820HIGH7.5same product
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially le...