CVE-2022-23815

HIGH

AMD Ryzen and Athlon Firmware < picassopi-fp5_1.0.0.e - Out-of-Bounds Write in APCB

Title source: llm
STIX 2.1

Description

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0008
EPSS Percentile 24.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (16)
amd/athlon_gold_3150g_firmware
amd/athlon_gold_3150u_firmware < picassopi-fp5_1.0.0.e
amd/athlon_gold_pro_3150g_firmware
amd/athlon_gold_pro_3150ge_firmware
amd/athlon_pro_300ge_firmware
amd/athlon_silver_3050u_firmware < picassopi-fp5_1.0.0.e
amd/ryzen_3_3200u_firmware < picassopi-fp5_1.0.0.e
amd/ryzen_3_3250u_firmware < picassopi-fp5_1.0.0.e
amd/ryzen_3_3300u_firmware < picassopi-fp5_1.0.0.e
amd/ryzen_5_3500u_firmware < picassopi-fp5_1.0.0.e
... and 6 more
Published Aug 13, 2024
Tracked Since Feb 18, 2026