CVE-2022-23813

Published: Jan 11, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment.

Affected (2)

Products: Amd: Milanpi Sp3 Firmware, Romepi Firmware

Amd

2 products

Milanpi Sp3 Firmware

Romepi Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Milanpi Sp3 Firmware	Before 1.0.0.9

Running on/with	Platform Versions
Amd Milanpi Sp3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Romepi Firmware	Before 1.0.0.e

Running on/with	Platform Versions
Amd Romepi	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.