CVE-2023-20555

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
AMD	Ryzen™ 3000 Series Desktop Processors “Matisse” AM4	various
AMD	Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4	various
AMD	Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” AM4	various
AMD	Ryzen™ 7000 Series Processors “Raphael”	various
AMD	Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso”	various
AMD	Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” FP5	various
AMD	Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5	various
AMD	Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”	various
AMD	Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Picasso”	various
AMD	Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6	various
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”	various
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”	various
AMD	Ryzen™ 6000 Series Mobile Processors "Rembrandt"	various
AMD	Ryzen™ 7030 Series Mobile Processors “Barcelo”	various
AMD	Ryzen™ 7020 Series Mobile Processors “Mendocino”	various
amd	ryzen_3000_series_desktop_processors	V1-1.0.0.A
amd	ryzen_5000_series_desktop_processors	V2-PI_1.2.0.A
amd	ryzen_7000_series_desktop_processors	1.0.0.6
amd	athlon_3000g	1.0.0.A; 1.2.0.A
amd	ryzen_4000_series_desktop_processors_with_radeon_graphics	1.2.0.A

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4003Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4003Vendor Advisory

Timeline

Published: Aug 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-205565.5Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary b CVE-2023-205588.8Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to a CVE-2023-205598.8Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading CVE-2023-20569.8A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file modu CVE-2023-205604.4Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a n CVE-2023-205615.5Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary a CVE-2023-205627.8Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned dr CVE-2023-205637.8Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local CVE-2023-205646.7Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform me CVE-2023-205657.8Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local CVE-2023-205667.5Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.CVE-2023-205676.7Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDS