CVE-2022-23815: High severity amd athlon silver 3050u vulnerability
Published Aug 13, 2024
·Updated
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
Affected Software
32 affected components
All of the following
AMD Athlon Silver 3050u Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Silver 3050u
All of the following
AMD Athlon Gold 3150u Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Gold 3150u
All of the following
AMD Ryzen 7 3780u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 3780u
All of the following
AMD Ryzen 7 3750h Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 3750h
All of the following
AMD Ryzen 7 Pro 3700u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 Pro 3700u
All of the following
AMD Ryzen 7 3700u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 3700u
All of the following
AMD Ryzen 5 3580u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3580u
All of the following
AMD Ryzen 5 3550h Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3550h
All of the following
AMD Ryzen 5 3500u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3500u
All of the following
AMD Ryzen 3 3300u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 3 3300u
All of the following
AMD Ryzen 3 3250u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 3 3250u
All of the following
AMD Ryzen 3 3200u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 3 3200u
All of the following
AMD Athlon Gold Pro 3150g Firmware
AMD Athlon Gold Pro 3150g
All of the following
AMD Athlon Gold 3150g Firmware
AMD Athlon Gold 3150g
All of the following
AMD Athlon Gold Pro 3150ge Firmware
AMD Athlon Gold Pro 3150ge
All of the following
AMD Athlon Pro 300ge Firmware
AMD Athlon Pro 300ge
Event History
Aug 13, 2024
CVE Published
via MITRE·04:51 PM
Data Sourced
via MITRE·04:51 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2022-23815?
CVE-2022-23815 is classified as a high severity vulnerability due to potential arbitrary code execution.
2
How do I fix CVE-2022-23815?
To fix CVE-2022-23815, update the firmware of the affected AMD processors to the version above picassopi-fp5_1.0.0.e.
3
What type of devices are affected by CVE-2022-23815?
CVE-2022-23815 impacts various AMD Athlon and Ryzen processors with specific firmware versions.
4
What exploitation methods are possible for CVE-2022-23815?
CVE-2022-23815 allows an attacker to perform an out-of-bounds write, which can lead to arbitrary code execution.
5
Is my device vulnerable to CVE-2022-23815?
If your device uses affected AMD firmware versions listed under CVE-2022-23815, it is vulnerable.