high8.8
CVE-2023-20558
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of pri…
Impact
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 7 5700g Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 7 5700ge Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 5 5600g Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 5 5600ge Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 3 5300g Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 3 5300ge Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 9 5980hx Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 9 5980hs Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 7 5825u Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 9 5900hx Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 9 5900hs Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 7 5825c Firmware | before cezannepi-fp6_1.0.0.9 |