← Database
CVE-2023-20555
HIGH
CVSS: 7.8
Published: 2023-08-08
Modified: 2026-06-17
Description
Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting
an arbitrary bit in an attacker-controlled pointer potentially leading to
arbitrary code execution in SMM.
Affected Platforms
Amd Ryzen 5 4600H FirmwareAmd Ryzen 9 6900HxAmd Ryzen 7 3700CAmd Ryzen 7 5800XAmd Ryzen 3 5100 FirmwareAmd Ryzen 9 5980HxAmd Ryzen 7 5800UAmd Ryzen 5 5625U FirmwareAmd Ryzen 5 5560U FirmwareAmd Ryzen 3 5300Ge