CVE-2023-20555

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

Score
CVSS 3.1 7.8 High
Status
Modified - psirt@amd.com
Published
2023-08-08
Last modified
2024-10-24
Weaknesses
CWE-787

Affected products

References