VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-20596

CVE-2023-20596

Description

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Affected products

8
  • AMD/SMM Supervisorllm-create
  • AMD/AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"v5
    Range: various
  • AMD/AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”v5
    Range: various
  • AMD/Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4v5
    Range: various
  • AMD/Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”v5
    Range: various
  • AMD/Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael”v5
    Range: various
  • AMD/Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” X3Dv5
    Range: various
  • AMD/Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Formerly codenamed “Phoenix”v5
    Range: various

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.