Riskcovery

CVE-2023-20507

State
Published
Severity
2.3 Low
Published
Feb 11, 2025
Updated
Feb 12, 2025
Reserved
Oct 27, 2022

Read the record on cve.org

Description

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

Scores

CVSSScoreVectorSource
3.12.3 LowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:NAMD

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsAMD
  • ComboAM4V2 1.2.0.ANot affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD
  • ComboAM5 1.0.0.6Not affected
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD
  • ComboAM4V2 1.2.0.ANot affected
AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ GraphicsAMD
  • ComboAM4V2 1.2.0.ANot affected
AMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsAMD
  • ComboAM5 1.0.0.6Not affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • RenoirPI-FP6 1.0.0.CNot affected
AMD Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6 1.0.0.ENot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • MendocinoPI-FT6 1.0.0.5Not affected
AMD Ryzen™ 6000 Series Processor with Radeon™ GraphicsAMD
  • RembrandtPI-FP7 1.0.0.8Not affected
AMD Ryzen™ 7035 Series Processor with Radeon™ GraphicsAMD
  • RembrandtPI-FP7 1.0.0.8Not affected
AMD Ryzen™ 7000 Series Mobile ProcessorsAMD
  • DragonRangeFL1 1.0.0.2bNot affected
AMD Ryzen™ Embedded 5000AMD
  • EmbAM4PI 1.0.0.5Not affected
AMD Ryzen™ Embedded 7000AMD
  • EmbeddedAM5PI 1.0.0.0Not affected
AMD Ryzen™ Embedded V2000AMD
  • EmbeddedPI-FP6 1.0.0.8Not affected
AMD Ryzen™ Embedded V3000AMD
  • EmbeddedPI-FP7r2 1.0.0.6Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.