Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-20520

No fix known EPSS <1%CVSS 9.8

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.

Published 2023-05-09 · CVE record · OSV

Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™