CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-23820
Critical (9.8) in amd. EPSS 0.7% chance of exploitation in the next 30 days.
Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:athlon_3015ce_firmware
- amd:athlon_3015e_firmware
- amd:ryzen_3_3100_firmware
- amd:ryzen_3_3300u_firmware
- amd:ryzen_3_3300x_firmware
- amd:ryzen_3_3350u_firmware
- amd:ryzen_3_4300u_firmware
- amd:ryzen_3_5100_firmware
- amd:ryzen_3_5125c_firmware
- amd:ryzen_3_5400u_firmware
- amd:ryzen_3_5425u_firmware
- amd:ryzen_3_7335u_firmware
- amd:ryzen_5_3450u_firmware
- amd:ryzen_5_3500_firmware
- amd:ryzen_5_3500c_firmware
- amd:ryzen_5_3500u_firmware
- amd:ryzen_5_3500x_firmware
- amd:ryzen_5_3550h_firmware
- amd:ryzen_5_3580u_firmware
- amd:ryzen_5_3600_firmware
- amd:ryzen_5_3600x_firmware
- amd:ryzen_5_3600xt_firmware
- amd:ryzen_5_4500u_firmware
- amd:ryzen_5_4600h_firmware
- amd:ryzen_5_4600hs_firmware
- amd:ryzen_5_4600u_firmware
- amd:ryzen_5_4680u_firmware
- amd:ryzen_5_55003xd_firmware
- amd:ryzen_5_5500_firmware
- amd:ryzen_5_5500h_firmware
- amd:ryzen_5_5500x_firmware
- amd:ryzen_5_5560u_firmware
- amd:ryzen_5_56003xd_firmware
- amd:ryzen_5_5600_firmware
- amd:ryzen_5_5600h_firmware
- amd:ryzen_5_5600hs_firmware
- amd:ryzen_5_5600u_firmware
- amd:ryzen_5_5600x_firmware
- amd:ryzen_5_5625u_firmware
- amd:ryzen_5_6600h_firmware
- amd:ryzen_5_6600hs_firmware
- amd:ryzen_5_6600u_firmware
- amd:ryzen_5_7535hs_firmware
- amd:ryzen_5_7535u_firmware
- amd:ryzen_5_pro_3350g_firmware
- amd:ryzen_5_pro_3350ge_firmware
- amd:ryzen_5_pro_3400g_firmware
- amd:ryzen_5_pro_3400ge_firmware
- amd:ryzen_5_pro_5645_firmware
- amd:ryzen_7_3700c_firmware
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002