CVE-2023-20507

LOW

AMD Ryzen and Athlon Processors - Integer Overflow in ASP Leading to Out-of-Bounds Write

Title source: llm
STIX 2.1

Description

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

References (2)

Core 2

Scores

CVSS v3 2.3
EPSS 0.0008
EPSS Percentile 23.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (15)
AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4V2 1.2.0.A
AMD/AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics ComboAM4V2 1.2.0.A
AMD/AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics RenoirPI-FP6 1.0.0.C
AMD/AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics ComboAM4V2 1.2.0.A
AMD/AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.E
AMD/AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.8
AMD/AMD Ryzen™ 7000 Series Desktop Processors ComboAM5 1.0.0.6
AMD/AMD Ryzen™ 7000 Series Mobile Processors DragonRangeFL1 1.0.0.2b
AMD/AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics MendocinoPI-FT6 1.0.0.5
AMD/AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics RembrandtPI-FP7 1.0.0.8
... and 5 more
Published Feb 11, 2025
Tracked Since Feb 18, 2026