CVE Vulnerabilities

CVE-2023-20596

Published: Nov 14, 2023 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Affected Software

NameVendorStart VersionEnd Version
Ryzen_7_5700g_firmwareAmd*comboam4v2_1.2.0.b (excluding)

References