← Database

CVE-2023-20528

LOW CVSS: 2.4 Published: 2023-01-11 Modified: 2026-06-17

Description

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.

Affected Platforms

Amd Epyc 7642Amd Epyc 7743Amd Epyc 7502PAmd Epyc 74F3Amd Epyc 7003 FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7743 FirmwareAmd Epyc 7302PAmd Epyc 7702PAmd Epyc 7F52

Weakness Type

CWE-20, CWE-20

References