CVE-2022-23813

Katalog CVE

CVSS 5.3 · Medium EPSS 0,50%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada amd milanpi-sp3 firmware, amd romepi firmware. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment.

Rincian

Terbit di NVD

11 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,50% peluang dieksploitasi; lebih tinggi dari 41,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 advisory vendor