CVE-2022-23815: AMD Athlon™ 3000 Series Desktop Processors with

Описание

Оригинално описание

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

Засегнати продукти

• AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics: various
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: PicassoPI-FP5 1.0.0.F
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: PollockPI-FT5 1.0.0.5
• AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics: PicassoPI-FP5 1.0.0.E
• AMD AMD RyzenTM Embedded R1000: EmbeddedPI-FP5 1.2.0.A
• AMD AMD RyzenTM Embedded R2000: EmbeddedR2KPI-FP5 1.0.0.2
• AMD AMD RyzenTM Embedded V1000: EmbeddedPI-FP5 1.2.0.A
• amd: още 4 продукта, добавени от amd

  athlon_3000g, ryzen_embedded_r1000, ryzen_embedded_r2000, ryzen_embedded_v1000

Вид слабост

• CWE-787 Out-of-bounds Write

История

Други уязвимости в AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

• 7.4CVE-2023-20577
• 5.6CVE-2023-20572
• 7.1CVE-2021-46747
• 6.9CVE-2025-48516
• 1.8CVE-2022-23826

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-23815
• https://nvd.nist.gov/vuln/detail/CVE-2022-23815
• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html