Description
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- AMD / AMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsComboAM4v2PI 1.2.0.C – ComboAM4v2PI 1.2.0.C
- AMD / AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsPollock-FT5 1.0.0.7 – Pollock-FT5 1.0.0.7
- AMD / AMD EPYC™ 7003 ProcessorsMilanPI 1.0.0.C – MilanPI 1.0.0.C
- AMD / AMD EPYC™ 9004 ProcessorsGenoaPI 1.0.0.B – GenoaPI 1.0.0.B
- AMD / AMD EPYC™ Embedded 7003EmbMilanPI-SP3 1.0.0.8 – EmbMilanPI-SP3 1.0.0.8
- AMD / AMD EPYC™ Embedded 9004EmbGenoaPI-SP5 1.0.0.6 – EmbGenoaPI-SP5 1.0.0.6
- AMD / AMD Instinct™ MI300AMI300API 1.0.0.5 – MI300API 1.0.0.5
- AMD / AMD Ryzen™ 3000 Series Desktop ProcessorsComboAM4v2PI 1.2.0.C – ComboAM4v2PI 1.2.0.C
- AMD / AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ GraphicsPicasso-FP5 1.0.1.1 – Picasso-FP5 1.0.1.1
- AMD / AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ GraphicsComboAM4v2PI 1.2.0.C – ComboAM4v2PI 1.2.0.C
- AMD / AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsRenoirPI-FP6 1.0.0.D – RenoirPI-FP6 1.0.0.D
- AMD / AMD Ryzen™ 5000 Series Desktop ProcessorsComboAM4v2PI 1.2.0.C – ComboAM4v2PI 1.2.0.C
- AMD / AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsComboAM4v2PI 1.2.0.C – ComboAM4v2PI 1.2.0.C
- AMD / AMD Ryzen™ 5000 Series Processors with Radeon™ GraphicsCezanne-FP6 1.0.1.0 – Cezanne-FP6 1.0.1.0
- AMD / AMD Ryzen™ 6000 Series Processor with Radeon™ GraphicsRembrandt-FP7 1.0.0.A – Rembrandt-FP7 1.0.0.A
- AMD / AMD Ryzen™ 7000 Series Desktop ProcessorsComboAM5 1.1.0.2 – ComboAM5 1.1.0.2
- AMD / AMD Ryzen™ 7000 Series Mobile ProcessorsDragonRangeFL1PI 1.0.0.3C – DragonRangeFL1PI 1.0.0.3C
- AMD / AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsMendocinoPI-FT6 1.0.0.6 – MendocinoPI-FT6 1.0.0.6
- AMD / AMD Ryzen™ 7035 Series Processor with Radeon™ GraphicsRembrandt-FP7 1.0.0.A – Rembrandt-FP7 1.0.0.A
- AMD / AMD Ryzen™ 7040 Series Processors with Radeon™ GraphicsPhoenixPI-FP8-FP7 1.1.0.2 – PhoenixPI-FP8-FP7 1.1.0.2
- AMD / AMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsComboAM5 1.1.0.2 – ComboAM5 1.1.0.2
- AMD / AMD Ryzen™ Embedded 5000EmbAM4PI 1.0.0.5 – EmbAM4PI 1.0.0.5
- AMD / AMD Ryzen™ Embedded 7000EmbeddedAM5PI 1.0.0.1 – EmbeddedAM5PI 1.0.0.1
- AMD / AMD Ryzen™ Embedded R1000EmbeddedPI-FP5 1.2.0.C – EmbeddedPI-FP5 1.2.0.C
- AMD / AMD Ryzen™ Embedded R2000EmbeddedR2KPI-FP5 1.0.0.3 – EmbeddedR2KPI-FP5 1.0.0.3
- AMD / AMD Ryzen™Embedded V2000EmbeddedPI-FP6 1.0.0.9 – EmbeddedPI-FP6 1.0.0.9
- AMD / AMD Ryzen™Embedded V3000Embedded-PI FP7r2 1.0.0.9 – Embedded-PI FP7r2 1.0.0.9
- AMD / AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop ProcessorsChagallWSPI-sWRX8 1.0.0.7 – ChagallWSPI-sWRX8 1.0.0.7