← Database

CVE-2023-20558

HIGH CVSS: 8.8 Published: 2023-04-02 Modified: 2026-06-17

Description

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.

Affected Platforms

Amd Ryzen Threadripper Pro 5975WxAmd Ryzen 9 5980HxAmd Ryzen 7 5800UAmd Ryzen 5 5625U FirmwareAmd Ryzen Threadripper Pro 3975WxAmd Ryzen 5 5560U FirmwareAmd Ryzen 3 5300GeAmd Ryzen Threadripper 2970Wx FirmwareAmd Ryzen 3 3700U FirmwareAmd Ryzen 9 Pro 3900

Weakness Type

NVD-CWE-Other, CWE-670

References