CVE-2023-20555
high-risk
Published 2023-08-08
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.
Do I need to act?
-
0.04% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10
High
LOCAL
/ LOW complexity
Affected Products (20)
Ryzen 3 3300 Firmware
Ryzen 7 3700 Firmware
Ryzen 9 3800X Firmware
Ryzen 9 3850X Firmware
Ryzen 9 5900 Firmware
Ryzen 9 Pro 5945 Firmware
Ryzen 7 5800 Firmware
Ryzen 7 Pro 5845 Firmware
Ryzen 5 5600X3D Firmware
Affected Vendors
References (2)
55
/ 100
high-risk
Severity
24/34 · High
Exploitability
0/34 · Minimal
Exposure
31/34 · Critical