High severity7.5NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026
CVE-2022-23815
CVE-2022-23815
Description
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
Affected products
23- AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphicsv5Range: various
- AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphicsv5Range: PollockPI-FT5 1.0.0.5
- AMD/AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphicsv5Range: PicassoPI-FP5 1.0.0.E
- AMD/AMD RyzenTM Embedded R1000v5Range: EmbeddedPI-FP5 1.2.0.A
- AMD/AMD RyzenTM Embedded R2000v5Range: EmbeddedR2KPI-FP5 1.0.0.2
- AMD/AMD RyzenTM Embedded V1000v5Range: EmbeddedPI-FP5 1.2.0.A
- cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_7_pro_3700u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:*range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:*Range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.