CVE-2023-20555
hw: AMD: SMM Memory Corruption Vulnerability
Loading…
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 9, 2023
Updated · November 22, 2025
Description
A flaw was found in hw. Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer, potentially leading to arbitrary code execution in SMM.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Please contact AMD for further information.
CVSS / CWE
CVSS 3.1 · 8.2CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE not specified