High severity · published Aug 13, 2024
CVE-2022-23815
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution
8.2
CVSS
0.2%
EPSS
No
On KEV
Description
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
Athlon Gold 3150g Firmware · Amd
All versions, or not specified · source: NVD
AG
Athlon Gold 3150u Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
AG
Athlon Gold Pro 3150g Firmware · Amd
All versions, or not specified · source: NVD
AG
Athlon Gold Pro 3150ge Firmware · Amd
All versions, or not specified · source: NVD
AP
Athlon Pro 300ge Firmware · Amd
All versions, or not specified · source: NVD
AS
Athlon Silver 3050u Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
R3
Ryzen 3 3200u Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
R3
Ryzen 3 3250u Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
R3
Ryzen 3 3300u Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
R5
Ryzen 5 3500u Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
R5
Ryzen 5 3550h Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
R5
Ryzen 5 3580u Firmware · Amd
before picassopi-fp5_1.0.0.e · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-23815
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-23815
Vendor Advisory
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html
More from Athlon Gold 3150g Firmware
9.1
CVE-2021-46754
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive…
7.8
CVE-2023-20555
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially…
7.5
CVE-2021-46794
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data…
7.5
CVE-2021-46749
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data…
6.1
CVE-2021-46759
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to…