What’s Vulnerable › Vulnerabilities

CVE-2022-23820

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-14 · updated 2026-06-17
• Weakness: CWE-20

Description

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.

Affected products

• AMD Athlon 3015Ce Firmware: pollockpi-ft5_1.0.0.5
• AMD Athlon 3015E Firmware: pollockpi-ft5_1.0.0.5
• AMD Ryzen 3 3100 Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
• AMD Ryzen 3 3300U Firmware: picassopi-fp5_1.0.0.e
• AMD Ryzen 3 3300X Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
• AMD Ryzen 3 3350U Firmware: picassopi-fp5_1.0.0.e
• AMD Ryzen 3 4300U Firmware: renoirpi-fp6_1.0.0.9
• AMD Ryzen 3 5100 Firmware: comboam4v2_pi_1.2.0.8
• AMD Ryzen 3 5125C Firmware: cezannepi-fp6_1.0.0.b
• AMD Ryzen 3 5400U Firmware: cezannepi-fp6_1.0.0.b
• AMD Ryzen 3 5425U Firmware: cezannepi-fp6_1.0.0.b
• AMD Ryzen 3 7335U Firmware: rembrandtpi-fp7_1.0.0.2
• AMD Ryzen 5 3450U Firmware: picassopi-fp5_1.0.0.e
• AMD Ryzen 5 3500 Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
• AMD Ryzen 5 3500C Firmware: picassopi-fp5_1.0.0.e
• AMD Ryzen 5 3500U Firmware: picassopi-fp5_1.0.0.e
• AMD Ryzen 5 3500X Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
• AMD Ryzen 5 3550H Firmware: picassopi-fp5_1.0.0.e
• AMD Ryzen 5 3580U Firmware: picassopi-fp5_1.0.0.e
• AMD Ryzen 5 3600 Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
• AMD Ryzen 5 3600X Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
• AMD Ryzen 5 3600Xt Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
• AMD Ryzen 5 4500U Firmware: renoirpi-fp6_1.0.0.9
• AMD Ryzen 5 4600H Firmware: renoirpi-fp6_1.0.0.9
• AMD Ryzen 5 4600Hs Firmware: renoirpi-fp6_1.0.0.9
• AMD Ryzen 5 4600U Firmware: renoirpi-fp6_1.0.0.9
• AMD Ryzen 5 4680U Firmware: renoirpi-fp6_1.0.0.9
• AMD Ryzen 5 55003Xd Firmware: comboam4v2_pi_1.2.0.8
• AMD Ryzen 5 5500 Firmware: comboam4v2_pi_1.2.0.8
• AMD Ryzen 5 5500H Firmware: cezannepi-fp6_1.0.0.b

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001

Get alerted when CVE-2022-23820 or the next vulnerability affects your stack