NetSight
IP …
high7.8

CVE-2023-20555

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled poi…

Impact

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

Affected products

VendorProductAffected versions
AmdRyzen 3 3300 Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 3 3300x Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 5 3600 Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 5 3600x Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 7 3700 Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 7 3700x Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 9 3800x Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 9 3850x Firmware
before comboam4_pi_v1_1.0.0.a
before comboam4v2_pi_1.2.0.a
AmdRyzen 9 5950x Firmware
before comboam4_v2_pi_1.2.0.a
AmdRyzen 9 5900x Firmware
before comboam4_v2_pi_1.2.0.a
AmdRyzen 9 5900 Firmware
before comboam4_v2_pi_1.2.0.a
AmdRyzen 9 Pro 5945 Firmware
before comboam4_v2_pi_1.2.0.a

Weakness classification

CWE-787

References