CVE-2022-23815

Severity: high (CVSS 8.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-13 · updated 2026-06-17
Weakness: CWE-787

Description

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

Affected products

AMD Athlon Gold 3150G Firmware: all versions
AMD Athlon Gold 3150U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Athlon Gold Pro 3150G Firmware: all versions
AMD Athlon Gold Pro 3150Ge Firmware: all versions
AMD Athlon Pro 300Ge Firmware: all versions
AMD Athlon Silver 3050U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 3 3200U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 3 3250U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 3 3300U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 5 3500U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 5 3550H Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 5 3580U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 7 3700U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 7 3750H Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 7 3780U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e
AMD Ryzen 7 Pro 3700U Firmware: before picassopi-fp5_1.0.0.e — fixed in picassopi-fp5_1.0.0.e

How to fix

Upgrade to a fixed version: AMD Athlon Gold 3150U Firmware picassopi-fp5_1.0.0.e; AMD Athlon Silver 3050U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 3 3200U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 3 3250U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 3 3300U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 5 3500U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 5 3550H Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 5 3580U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 7 3700U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 7 3750H Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 7 3780U Firmware picassopi-fp5_1.0.0.e; AMD Ryzen 7 Pro 3700U Firmware picassopi-fp5_1.0.0.e. Check the vendor advisory for mitigations.

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html

Get alerted when CVE-2022-23815 or the next vulnerability affects your stack