CVE-2023-20508

MEDIUM

ASP - Memory Corruption

Title source: llm

Description

Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability.

References (1)

[Vendor Advisory] https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6008.html

Scores

CVSS v3 5.0

EPSS 0.0004

EPSS Percentile 13.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1284

Status published

Products (44)

AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)

AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics AMD Software: PRO Edition 24.Q2 (24.10.20)

AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)

AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Software: PRO Edition 24.Q2 (24.10.20)

AMD/AMD Instinct™ MI300A MI300PI 1.0.0.5

AMD/AMD Instinct™ MI300X BKC 24.12

AMD/AMD Radeon™ Instinct™ MI25 Contact your AMD Customer Engineering representative

AMD/AMD Radeon™ PRO V520 Contact your AMD Customer Engineering representative

AMD/AMD Radeon™ PRO V620 Contact your AMD Customer Engineering representative

AMD/AMD Radeon™ PRO V710 Contact your AMD Customer Engineering representative

... and 34 more

Published Feb 12, 2025

Tracked Since Feb 18, 2026