CVE-2022-23820

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution

High · published November 14, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

Failure to validate the AMD SMM communication buffer

may allow an attacker to corrupt the SMRAM potentially leading to arbitrary

code execution.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00697 · 52.5th percentile
Published
2023-11-14T18:52Z
EPSS history
Timeline
  • 14 NOV 18:52Z
    Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution
    cvelistv5