CVE-2023-20597
MEDIUMAMD Ryzen 3000 Series Firmware - Information Disclosure via DXE Driver
Title source: llmDescription
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
Scores
CVSS v3
5.5
EPSS
0.0006
EPSS Percentile
19.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-665
CWE-824
Status
published
Products (50)
amd/ryzen_3100_firmware
comboam4pi_1.0.0.9
amd/ryzen_3100_firmware
comboam4v2pi_1.2.0.8
amd/ryzen_3300x_firmware
comboam4pi_1.0.0.9
amd/ryzen_3300x_firmware
comboam4v2pi_1.2.0.8
amd/ryzen_3500_firmware
comboam4pi_1.0.0.9
amd/ryzen_3500_firmware
comboam4v2pi_1.2.0.8
amd/ryzen_3500x_firmware
comboam4pi_1.0.0.9
amd/ryzen_3500x_firmware
comboam4v2pi_1.2.0.8
amd/ryzen_3600_firmware
comboam4pi_1.0.0.9
amd/ryzen_3600_firmware
comboam4v2pi_1.2.0.8
... and 40 more
Published
Sep 20, 2023
Tracked Since
Feb 18, 2026