AMD AMD Ryzenâ„¢ 5000 Series Desktop Processor with Radeonâ„¢ Graphics

CVE-2023-20507
LOW 2.3

En bref

Source
NVD
EPSS
EPSS 0.15 % · centile 4 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
AMD
Statut NVD
Deferred

Description

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

Faiblesses (CWE)

  • CWE-190 — Débordement d'entier

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1LOW 2.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:NAMD
CVSS 3.1LOW 2.3CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:NNVD · psirt@amd.com (Secondary)

Références européennes

Produits affectés

ProduitVersions
AMD · AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphicsunaffected ComboAM4V2 1.2.0.A
AMD · AMD Ryzen™ 7000 Series Desktop Processorsunaffected ComboAM5 1.0.0.6
AMD · AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphicsunaffected ComboAM4V2 1.2.0.A
AMD · AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphicsunaffected ComboAM4V2 1.2.0.A
AMD · AMD Ryzen™ 8000 Series Processor with Radeon™ Graphicsunaffected ComboAM5 1.0.0.6
AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphicsunaffected RenoirPI-FP6 1.0.0.C
AMD · AMD Ryzen™ 5000 Series Processors with Radeon™ Graphicsunaffected CezannePI-FP6 1.0.0.E
AMD · AMD Ryzen™ 7020 Series Processors with Radeon™ Graphicsunaffected MendocinoPI-FT6 1.0.0.5
AMD · AMD Ryzen™ 6000 Series Processor with Radeon™ Graphicsunaffected RembrandtPI-FP7 1.0.0.8
AMD · AMD Ryzen™ 7035 Series Processor with Radeon™ Graphicsunaffected RembrandtPI-FP7 1.0.0.8
AMD · AMD Ryzen™ 7000 Series Mobile Processorsunaffected DragonRangeFL1 1.0.0.2b
AMD · AMD Ryzen™ Embedded 5000unaffected EmbAM4PI 1.0.0.5
AMD · AMD Ryzen™ Embedded 7000unaffected EmbeddedAM5PI 1.0.0.0
AMD · AMD Ryzen™ Embedded V2000unaffected EmbeddedPI-FP6 1.0.0.8
AMD · AMD Ryzen™ Embedded V3000unaffected EmbeddedPI-FP7r2 1.0.0.6

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD