CVEvulnerability

CVE-2022-23820

9.8 CRITICAL Published 2023-11-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.

Affected configurations

• amd ryzen 9 3900 firmware comboam4 pi 1.0.0.9 • amd ryzen 9 3900 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 9 3900x firmware comboam4 pi 1.0.0.9 • amd ryzen 9 3900x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 9 3900xt firmware comboam4 pi 1.0.0.9 • amd ryzen 9 3900xt firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 9 3950x firmware comboam4 pi 1.0.0.9 • amd ryzen 9 3950x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 7 3700x firmware comboam4 pi 1.0.0.9 • amd ryzen 7 3700x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 7 3800x firmware comboam4 pi 1.0.0.9 • amd ryzen 7 3800x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 7 3800xt firmware comboam4 pi 1.0.0.9 • amd ryzen 7 3800xt firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 3500 firmware comboam4 pi 1.0.0.9 • amd ryzen 5 3500 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 3500x firmware comboam4 pi 1.0.0.9 • amd ryzen 5 3500x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 3600 firmware comboam4 pi 1.0.0.9 • amd ryzen 5 3600 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 3600x firmware comboam4 pi 1.0.0.9 • amd ryzen 5 3600x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 3600xt firmware comboam4 pi 1.0.0.9 • amd ryzen 5 3600xt firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 3 3100 firmware comboam4 pi 1.0.0.9 • amd ryzen 3 3100 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 3 3300x firmware comboam4 pi 1.0.0.9 • amd ryzen 3 3300x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 9 5900 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 9 5900x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 9 5950x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 9 pro 5945 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 7 pro 5845 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 7 5800 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 7 5800x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 7 5700x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 5600 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 5600x firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 56003xd firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 pro 5645 firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 5500 firmware comboam4v2 pi 1.2.0.8 • amd ryzen 5 5500x firmware comboam4v2 pi 1.2.0.8 • amd ryzen 5 55003xd firmware comboam4v2 pi 1.2.0.8 • amd ryzen 7 5700 firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3 5100 firmware comboam4v2 pi 1.2.0.8 • amd ryzen 5 pro 3400g firmware comboam4 pi 1.0.0.9 • amd ryzen 5 pro 3400g firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 pro 3400ge firmware comboam4 pi 1.0.0.9 • amd ryzen 5 pro 3400ge firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 pro 3350g firmware comboam4 pi 1.0.0.9 • amd ryzen 5 pro 3350g firmware comboam4 v2 pi 1.2.0.8 • amd ryzen 5 pro 3350ge firmware comboam4 pi 1.0.0.9 • amd ryzen 5 pro 3350ge firmware comboam4 v2 pi 1.2.0.8 • amd ryzen threadripper 2990wx firmware summitpi-sp3r2 1.1.0.6 • amd ryzen threadripper 2970wx firmware summitpi-sp3r2 1.1.0.6 • amd ryzen threadripper 2950x firmware summitpi-sp3r2 1.1.0.6 • amd ryzen threadripper 2920x firmware summitpi-sp3r2 1.1.0.6 • amd ryzen threadripper pro 3995wx firmware castlepeakpi-sp3r2 1.1.0.8 • amd ryzen threadripper pro 3975wx firmware castlepeakpi-sp3r2 1.1.0.8 • amd ryzen threadripper pro 3955wx firmware castlepeakpi-sp3r2 1.1.0.8 … and 63 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References