What’s Vulnerable › Vulnerabilities
CVE-2022-23817
- Severity: high (CVSS 7.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-08-13 · updated 2026-06-17
- Weakness: CWE-20
Description
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.
Affected products
- AMD Athlon 3000G Firmware: all versions
- AMD Ryzen 5 3400G Firmware: all versions
- AMD Ryzen 5 7500F Firmware: all versions
- AMD Ryzen 7 3700C Firmware: all versions
- AMD Ryzen 7 4700G Firmware: all versions
- AMD Ryzen 7 7735Hs Firmware: all versions
- AMD Ryzen 9 3900 Firmware: all versions
- AMD Ryzen 9 4900H Firmware: all versions
- AMD Ryzen 9 5900 Firmware: all versions
- AMD Ryzen 9 5900Hs Firmware: all versions
- AMD Ryzen 9 6900Hs Firmware: all versions
- AMD Ryzen 9 7945Hx3D Firmware: all versions
- AMD Ryzen Threadripper 3960X Firmware: all versions
- AMD Ryzen Threadripper Pro 3945Wx Firmware: all versions
- AMD Ryzen Threadripper Pro 5945Wx Firmware: all versions
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-1029.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4004.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5002.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html
Get alerted when CVE-2022-23817 or the next vulnerability affects your stack