CVE-2023-20527

No fix known EPSS <1%CVSS 6.5

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.

Published 2023-01-10 · CVE record · OSV

Products: AMD 1st Gen EPYC, AMD 2nd Gen EPYC, AMD 3rd Gen EPYC