CVE-2022-23815

Published: Aug 13, 2024Modified: Mar 18, 2025

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: NVD

Description

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

Affected (16)

Products: Amd: Athlon Silver 3050u Firmware, Athlon Gold 3150u Firmware, Ryzen 7 3780u Firmware, Ryzen 7 3750h Firmware, Ryzen 7 Pro 3700u Firmware, Ryzen 7 3700u Firmware, Ryzen 5 3580u Firmware, Ryzen 5 3550h Firmware, Ryzen 5 3500u Firmware, Ryzen 3 3300u Firmware, Ryzen 3 3250u Firmware, Ryzen 3 3200u Firmware, Athlon Gold Pro 3150g Firmware, Athlon Gold 3150g Firmware, Athlon Gold Pro 3150ge Firmware, Athlon Pro 300ge Firmware

Amd

16 products

Athlon Silver 3050u Firmware

Athlon Gold 3150u Firmware

Ryzen 7 3780u Firmware

Ryzen 7 3750h Firmware

Ryzen 7 Pro 3700u Firmware

Ryzen 7 3700u Firmware

Ryzen 5 3580u Firmware

Ryzen 5 3550h Firmware

Ryzen 5 3500u Firmware

Ryzen 3 3300u Firmware

Ryzen 3 3250u Firmware

Ryzen 3 3200u Firmware

Athlon Gold Pro 3150g Firmware

Athlon Gold 3150g Firmware

Athlon Gold Pro 3150ge Firmware

Athlon Pro 300ge Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Silver 3050u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Athlon Silver 3050u	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Gold 3150u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Athlon Gold 3150u	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3780u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 7 3780u	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3750h Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 7 3750h	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 Pro 3700u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 7 Pro 3700u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3700u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 7 3700u	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3580u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 5 3580u	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3550h Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 5 3550h	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3500u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 5 3500u	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3300u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 3 3300u	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3250u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 3 3250u	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3200u Firmware	Before picassopi-fp5_1.0.0.e

Running on/with	Platform Versions
Amd Ryzen 3 3200u	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Gold Pro 3150g Firmware	All versions

Running on/with	Platform Versions
Amd Athlon Gold Pro 3150g	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Gold 3150g Firmware	All versions

Running on/with	Platform Versions
Amd Athlon Gold 3150g	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Gold Pro 3150ge Firmware	All versions

Running on/with	Platform Versions
Amd Athlon Gold Pro 3150ge	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Athlon Pro 300ge Firmware	All versions

Running on/with	Platform Versions
Amd Athlon Pro 300ge	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html

Source: psirt@amd.com

Vendor Advisory

Timeline

No history available yet.