Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HAmd Athlon Gold 3150g
HWAmdall versionsAmd Athlon Gold 3150g Firmware
OSAmdall versionsAmd Athlon Gold 3150u
HWAmdall versionsAmd Athlon Gold 3150u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Athlon Gold Pro 3150g
HWAmdall versionsAmd Athlon Gold Pro 3150ge
HWAmdall versionsAmd Athlon Gold Pro 3150ge Firmware
OSAmdall versionsAmd Athlon Gold Pro 3150g Firmware
OSAmdall versionsAmd Athlon Pro 300ge
HWAmdall versionsAmd Athlon Pro 300ge Firmware
OSAmdall versionsAmd Athlon Silver 3050u
HWAmdall versionsAmd Athlon Silver 3050u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 3 3200u
HWAmdall versionsAmd Ryzen 3 3200u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 3 3250u
HWAmdall versionsAmd Ryzen 3 3250u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 3 3300u
HWAmdall versionsAmd Ryzen 3 3300u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 5 3500u
HWAmdall versionsAmd Ryzen 5 3500u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 5 3550h
HWAmdall versionsAmd Ryzen 5 3550h Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 5 3580u
HWAmdall versionsAmd Ryzen 5 3580u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 7 3700u
HWAmdall versionsAmd Ryzen 7 3700u Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 7 3750h
HWAmdall versionsAmd Ryzen 7 3750h Firmware
OSAmd< picassopi-fp5_1.0.0.eAmd Ryzen 7 3780u
HWAmdall versionsAmd Ryzen 7 3780u Firmware
OSAmd< picassopi-fp5_1.0.0.e
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
Related vulnerabilities
CVE-2021-26365HIGH8.2same product
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, ...
CVE-2023-20559HIGH8.8same product
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with th...
CVE-2023-20558HIGH8.8same product
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM h...
CVE-2021-26384HIGH7.8same product
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigg...
CVE-2020-12965HIGH7.5same product
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store...