CVE-2023-20596

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-14 · updated 2026-06-17

Description

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Affected products

AMD Ryzen 3 5125C Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 3 5300G Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 3 5300Ge Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 3 5400U Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 3 5425U Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 3 7335U Firmware: before rembrandtpi-fp7_1.0.0.9b — fixed in rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 3 7440U Firmware: before phoenixpi-fp8-fp7_1.0.0.2 — fixed in phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 5500H Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5560U Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5600G Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 5 5600Ge Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 5 5600H Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5600Hs Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5600U Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5625U Firmware: before cezannepi-fp6_1.0.0.fa — fixed in cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 6600H Firmware: before rembrandtpi-fp7_1.0.0.9b — fixed in rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 6600Hs Firmware: before rembrandtpi-fp7_1.0.0.9b — fixed in rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 6600U Firmware: before rembrandtpi-fp7_1.0.0.9b — fixed in rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 7500F Firmware: before comboam5pi_1.0.8.0 — fixed in comboam5pi_1.0.8.0
AMD Ryzen 5 7535Hs Firmware: before rembrandtpi-fp7_1.0.0.9b — fixed in rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 7535U Firmware: before rembrandtpi-fp7_1.0.0.9b — fixed in rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 7600 Firmware: before comboam5pi_1.0.8.0 — fixed in comboam5pi_1.0.8.0
AMD Ryzen 5 7600X Firmware: before comboam5pi_1.0.8.0 — fixed in comboam5pi_1.0.8.0
AMD Ryzen 5 7640H Firmware: before phoenixpi-fp8-fp7_1.0.0.2 — fixed in phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7540U Firmware: before phoenixpi-fp8-fp7_1.0.0.2 — fixed in phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7545U Firmware: before phoenixpi-fp8-fp7_1.0.0.2 — fixed in phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7640Hs Firmware: before phoenixpi-fp8-fp7_1.0.0.2 — fixed in phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7640U Firmware: before phoenixpi-fp8-fp7_1.0.0.2 — fixed in phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7645 Firmware: before comboam5pi_1.0.8.0 — fixed in comboam5pi_1.0.8.0
AMD Ryzen 7 5700G Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b

How to fix

Upgrade to a fixed version: AMD Ryzen 3 5125C Firmware cezannepi-fp6_1.0.0.fa; AMD Ryzen 3 5300G Firmware comboam4v2_1.2.0.b; AMD Ryzen 3 5300Ge Firmware comboam4v2_1.2.0.b; AMD Ryzen 3 5400U Firmware cezannepi-fp6_1.0.0.fa; AMD Ryzen 3 5425U Firmware cezannepi-fp6_1.0.0.fa; AMD Ryzen 3 7335U Firmware rembrandtpi-fp7_1.0.0.9b; AMD Ryzen 3 7440U Firmware phoenixpi-fp8-fp7_1.0.0.2; AMD Ryzen 5 5500H Firmware cezannepi-fp6_1.0.0.fa; AMD Ryzen 5 5560U Firmware cezannepi-fp6_1.0.0.fa; AMD Ryzen 5 5600G Firmware comboam4v2_1.2.0.b; AMD Ryzen 5 5600Ge Firmware comboam4v2_1.2.0.b; AMD Ryzen 5 5600H Firmware cezannepi-fp6_1.0.0.fa. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-20596 or the next vulnerability affects your stack