VYPR
High severity7.8NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-20555

CVE-2023-20555

Description

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

Affected products

135

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.