CVE-2023-20555

Description

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

Reserved 2022-10-27 | Published 2023-08-08 | Updated 2024-10-24 | Assigner AMD

Product status

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

Default status
affected

various
affected

References

www.amd.com/...rporate/product-security/bulletin/AMD-SB-4003 vendor-advisory

cve.org (CVE-2023-20555)

nvd.nist.gov (CVE-2023-20555)

Download JSON