5.7
Medium
CVE-2023-20515 Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory,…
Description
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ 3000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 5000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7000 Series Desktop Processors | Versions not published | |
| AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ Threadripper™ 3000 Series Processors | Versions not published | |
| AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | Versions not published |
Show the 17 other branches Hide the 17 other branches
Other CVEs of AMD Ryzen™ 3000 Series Desktop Processors
The 43 CVEs of AMD Ryzen™ 3000 Series Desktop Processors →
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially…
7.7
High
CVE-2023-20572
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against…
5.6
Medium
CVE-2023-20540
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against…
1.8
Low