CVE-2023-20597: amd ryzen 3 3100 firmware +29 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-20597

CVSS 5.5 · Medium EPSS 0,18%

Kerentanan Access of Uninitialized Pointer pada amd ryzen 3 3100 firmware, amd ryzen 3 3200g firmware +28 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Rincian

Terbit di NVD: 20 September 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-824: Access of Uninitialized Pointer
CWE-665: Improper Initialization
EPSS (30 hari): 0,18% peluang dieksploitasi; lebih tinggi dari 7,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
amd	ryzen 3 3100 firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3100 firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3200g firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3200g firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3200ge firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3200ge firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3200u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3200u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3250c firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3250c firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3250u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3250u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3300 firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3300 firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3300g firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3300g firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3300u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3300u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3300x firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3300x firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3350u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3350u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3450u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3450u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3500c firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3500c firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3500u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3500u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3550h firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3550h firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3580u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3580u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3700c firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3700c firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3700u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3700u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3750h firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3750h firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3 3780u firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3 3780u firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3100 firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3100 firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3300x firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3300x firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3500 firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3500 firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3500x firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3500x firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3600 firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3600 firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3600x firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3600x firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3600xt firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3600xt firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3800x firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3800x firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3800xt firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3800xt firmware	Versi comboam4v2pi_1.2.0.8
amd	ryzen 3900 firmware	Versi comboam4pi_1.0.0.9
amd	ryzen 3900 firmware	Versi comboam4v2pi_1.2.0.8

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 182 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4007 advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.