CVE-2022-23815

🗓️ 13 Aug 2024 16:51:43Reported by AMDType

Improper bounds checking in APCB firmware, allows out of bounds write, leading to code executio

Reporter	Title	Published	Views	Family All 12
Amd	Client Vulnerabilities – Aug 2024	13 Aug 202400:00	–	amd
Amd	AMD Embedded Processors Vulnerabilities – Aug 2024	13 Aug 202400:00	–	amd
BDU FSTEC	A vulnerability in the firmware of AMD graphics processor microprogramming systems related to writing beyond buffer boundaries, allowing a hacker to execute arbitrary code.	18 Aug 202500:00	–	bdu_fstec
Circl	CVE-2022-23815	18 Mar 202520:48	–	circl
Cvelist	CVE-2022-23815	13 Aug 202416:51	–	cvelist
EUVD	EUVD-2022-28744	3 Oct 202520:07	–	euvd
Hewlett-Packard	AMD Client UEFI Firmware August 2024 Security Update	13 Aug 202400:00	–	hp
NVD	CVE-2022-23815	13 Aug 202417:15	–	nvd
OSV	CVE-2022-23815	13 Aug 202417:15	–	osv
Positive Technologies	PT-2024-11523 · Unknown +1 · Apcb Firmware +1	13 Aug 202400:00	–	ptsecurity

NVD

Node

amd athlon_silver_3050u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd athlon_silver_3050uMatch-

Node

amd athlon_gold_3150u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd athlon_gold_3150uMatch-

Node

amd ryzen_7_3780u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_3780uMatch-

Node

amd ryzen_7_3750h_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_3750hMatch-

Node

amd ryzen_7_pro_3700u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_pro_3700uMatch-

Node

amd ryzen_7_3700u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_3700uMatch-

Node

amd ryzen_5_3580u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3580uMatch-

Node

amd ryzen_5_3550h_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3550hMatch-

Node

amd ryzen_5_3500u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3500uMatch-

Node

amd ryzen_3_3300u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3300uMatch-

Node

amd ryzen_3_3250u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3250uMatch-

Node

amd ryzen_3_3200u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3200uMatch-

Node

amd athlon_gold_pro_3150g_firmwareMatch-

AND

amd athlon_gold_pro_3150gMatch-

Node

amd athlon_gold_3150g_firmwareMatch-

AND

amd athlon_gold_3150gMatch-

Node

amd athlon_gold_pro_3150ge_firmwareMatch-

AND

amd athlon_gold_pro_3150geMatch-

Node

amd athlon_pro_300ge_firmwareMatch-

AND

amd athlon_pro_300geMatch-

[
  {
    "defaultStatus": "affected",
    "product": "AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various",
        "versionType": "PI"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD Athlon™ 3000 Series Mobile  Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "PicassoPI-FP5  1.0.0.F"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD Athlon™ 3000 Series Mobile  Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "PollockPI-FT5  1.0.0.5"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "PicassoPI-FP5  1.0.0.E"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD RyzenTM Embedded R1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "EmbeddedPI-FP5  1.2.0.A"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD RyzenTM Embedded R2000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "EmbeddedR2KPI-FP5 1.0.0.2"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD RyzenTM Embedded V1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "EmbeddedPI-FP5 1.2.0.A"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html

17 Jun 2026 04:30Current

8High risk

Vulners AI Score8

CVSS 3.17.5 - 8.2

EPSS0.00163

SSVC

CWE-787