CVE-2022-23815

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

Score

CVSS 3.1 8.2 High

Status

Modified - psirt@amd.com

Published

2024-08-13

Last modified

2025-03-18

Weaknesses

CWE-787

Affected products

• Amd Athlon 3000 Series Desktop Processors With Radeon Graphics (Amd)
• Amd Athlon 3000 Series Mobile Processors With Radeon Graphics (Amd)
• Amd Ryzen 3000 Series Mobile Processor With Radeon Graphics (Amd)
• Amd Ryzentm Embedded R1000 (Amd)
• Amd Ryzentm Embedded R2000 (Amd)
• Amd Ryzentm Embedded V1000 (Amd)
• Athlon 3000g (Amd)
• Athlon Gold 3150g Firmware (Amd)
• Athlon Gold 3150u Firmware (Amd)
• Athlon Gold Pro 3150g Firmware (Amd)
• Athlon Gold Pro 3150ge Firmware (Amd)
• Athlon Pro 300ge Firmware (Amd)
• Athlon Silver 3050u Firmware (Amd)
• Ryzen 3 3200u Firmware (Amd)
• Ryzen 3 3250u Firmware (Amd)
• Ryzen 3 3300u Firmware (Amd)
• Ryzen 5 3500u Firmware (Amd)
• Ryzen 5 3550h Firmware (Amd)
• Ryzen 5 3580u Firmware (Amd)
• Ryzen 7 3700u Firmware (Amd)
• Ryzen 7 3750h Firmware (Amd)
• Ryzen 7 3780u Firmware (Amd)
• Ryzen 7 Pro 3700u Firmware (Amd)
• Ryzen Embedded R1000 (Amd)
• Ryzen Embedded R2000 (Amd)
• Ryzen Embedded V1000 (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html