CVE-2022-23820 HIGH

CVE-2022-23820

Vendor Amd
Product Ryzen™ 3000 series Desktop Processors “Matisse"
Published November 14, 2023
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.

Key dates

02Disclosure timeline

November 14, 2023 CVE published
August 3, 2024 Record updated