CVE-2023-20564

2023-08-1521:07:49

AMD

www.cve.org

amd ryzen™ master

input output control

insufficient validation

memory reads/writes

loss of confidentiality

arbitrary kernel execution

cve-2023-20564

0.0004 Low

EPSS

Percentile

5.1%

JSON

Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "x86",
      "Windows"
    ],
    "product": "Ryzen™ Master",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "2.11.2.2659",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7004

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-20564