Integer Overflow Vulnerability in AMD's ASP Component
CVE-2023-20507

2.3LOW

Key Information:

Vendor

Amd
Status
Amd Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics
Amd Ryzen™ 7000 Series Desktop Processors
Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics
Amd Ryzen™ 4000 Series Desktop Processor With Radeon™ Graphics
Vendor
CVE Published:
11 February 2025

What is CVE-2023-20507?

An integer overflow vulnerability present in the ASP component of AMD products allows a privileged attacker to execute an out-of-bounds write. This could lead to substantial data integrity issues, potentially compromising sensitive information and disrupting operations within affected systems.

Affected Version(s)

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4V2 1.2.0.A

AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics ComboAM4V2 1.2.0.A

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics RenoirPI-FP6 1.0.0.C

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.