CVE-2023-20558

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.

Score
CVSS 3.1 8.8 High
Status
Modified - psirt@amd.com
Published
2023-04-02
Last modified
2025-02-20
Weaknesses
CWE-670

Affected products

References