high7.5
CVE-2022-23820
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
Impact
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 9 3900 Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 9 3900x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 9 3900xt Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 9 3950x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 7 3700x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 7 3800x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 7 3800xt Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3500 Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3500x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3600 Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3600x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3600xt Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001