CVE-2023-20525
—CVSS 3.1
6.5 medium
EPSS
<1%p46
Published
()
Modified
Description
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.
- Vendors
- amd
- Products
- epyc 7h12 firmware, epyc 7f72 firmware, epyc 7f52 firmware, epyc 7f32 firmware, epyc 7742 firmware, epyc 7702p firmware, epyc 7702 firmware, epyc 7662 firmware, epyc 7642 firmware, epyc 7552 firmware, epyc 7542 firmware, epyc 7532 firmware
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.