CVE-2023-20527

Description

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.

Affected Platforms

Weakness Type

CWE-20, CWE-20

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032