Vulnerability in Amd Ryzen™ 6000 Series Processors With Radeon™ Graphics "Rembrandt"
CVE-2023-20596
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
EPSS: 0.004 (60.4th percentile) — read the EPSS interpretation.
Affected products
- Amd Ryzen™ 6000 Series Processors With Radeon™ Graphics "Rembrandt" — versions various
- Amd Ryzen™ 7035 Series Processors With Radeon™ Graphics “Rembrandt-r” — versions various
- Amd Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics Formerly Codenamed “Cezanne” Am4 — versions various
- Amd Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics “Cezanne” — versions various
- Amd Ryzen™ 7000 Series Desktop Processors With Radeon™ Graphics Formerly Codenamed “Raphael” — versions various
- Amd Ryzen™ 7000 Series Desktop Processors With Radeon™ Graphics Formerly Codenamed “Raphael” X3d — versions various
- Amd Ryzen™ 7040 Series Mobile Processors With Radeon™ Graphics Formerly Codenamed “Phoenix” — versions various
References
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7011 (vendor-advisory)