CVE-2023-20555 (published 2023-08-08T17:07:24.476Z)
Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting
an arbitrary bit in an attacker-controlled pointer potentially leading to
arbitrary code execution in SMM.
















Affected products: Vendor: AMD
Product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
Versions: various