CVE-2023-20525 (published 2023-01-10T20:57:00.713Z)
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.

Affected products: Vendor:  AMD
Product: 2nd Gen EPYC
Versions: various