What’s Vulnerable › Vulnerabilities

CVE-2023-20597

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-20 · updated 2026-06-17
• Weakness: CWE-824

Description

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Affected products

• AMD Ryzen 3100 Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3300X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3500 Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3500X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3600 Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3600X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3600Xt Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3800X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3800Xt Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3900 Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3900X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3900Xt Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3945Wx Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3950X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3955Wx Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3960X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3970X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3975Wx Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3990X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3995Wx Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3100 Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3200G Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3200Ge Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3200U Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3250C Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3250U Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3300 Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3300G Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3300U Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
• AMD Ryzen 3 3300X Firmware: comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4007
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4007

Get alerted when CVE-2023-20597 or the next vulnerability affects your stack