CVE-2023-20596: Input Validation
Published Nov 14, 2023
·Updated
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
Affected Software
128 affected components
AMD Ryzen 7 5700g Firmware<comboam4v2_1.2.0.b
AMD Ryzen 7 5700g
AMD Ryzen 7 5700ge Firmware<comboam4v2_1.2.0.b
AMD Ryzen 7 5700ge
AMD Ryzen 5 5600g Firmware<comboam4v2_1.2.0.b
AMD Ryzen 5 5600g
AMD Ryzen 5 5600ge Firmware<comboam4v2_1.2.0.b
AMD Ryzen 5 5600ge
AMD Ryzen 3 5300g Firmware<comboam4v2_1.2.0.b
AMD Ryzen 3 5300g
AMD Ryzen 3 5300ge Firmware<comboam4v2_1.2.0.b
AMD Ryzen 3 5300ge
AMD Ryzen 9 7950x3d Firmware<comboam5pi_1.0.8.0
AMD Ryzen 9 7950x3d
AMD Ryzen 9 7950x Firmware<comboam5pi_1.0.8.0
AMD Ryzen 9 7950x
AMD Ryzen 9 7900x3d Firmware<comboam5pi_1.0.8.0
AMD Ryzen 9 7900x3d
AMD Ryzen 9 7900 Firmware<comboam5pi_1.0.8.0
AMD Ryzen 9 7900
AMD Ryzen 9 7900x Firmware<comboam5pi_1.0.8.0
AMD Ryzen 9 7900x
AMD Ryzen 9 Pro 7945 Firmware<comboam5pi_1.0.8.0
AMD Ryzen 9 Pro 7945
AMD Ryzen 7 7800x3d Firmware<comboam5pi_1.0.8.0
AMD Ryzen 7 7800x3d
AMD Ryzen 7 7700x Firmware<comboam5pi_1.0.8.0
AMD Ryzen 7 7700x
AMD Ryzen 7 7700 Firmware<comboam5pi_1.0.8.0
AMD Ryzen 7 7700
AMD Ryzen 7 Pro 7745 Firmware<comboam5pi_1.0.8.0
AMD Ryzen 7 Pro 7745
AMD Ryzen 5 7600x Firmware<comboam5pi_1.0.8.0
AMD Ryzen 5 7600x
AMD Ryzen 5 7600 Firmware<comboam5pi_1.0.8.0
AMD Ryzen 5 7600
AMD Ryzen 5 Pro 7645 Firmware<comboam5pi_1.0.8.0
AMD Ryzen 5 Pro 7645
AMD Ryzen 5 7500f Firmware<comboam5pi_1.0.8.0
AMD Ryzen 5 7500f
AMD Ryzen 9 5980hx Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 9 5980hx
AMD Ryzen 9 5980hs Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 9 5980hs
AMD Ryzen 9 5900hx Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 9 5900hx
AMD Ryzen 9 5900hs Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 9 5900hs
AMD Ryzen 7 5800h Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 7 5800h
AMD Ryzen 7 5800hs Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 7 5800hs
AMD Ryzen 7 5825u Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 7 5825u
AMD Ryzen 7 5800u Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 7 5800u
AMD Ryzen 5 5600h Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5600h
AMD Ryzen 5 5600hs Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5600hs
AMD Ryzen 5 5625u Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5625u
AMD Ryzen 5 5600u Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5600u
AMD Ryzen 5 5560u Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5560u
AMD Ryzen 5 5500h Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 5 5500h
AMD Ryzen 3 5425u Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 3 5425u
AMD Ryzen 3 5400u Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 3 5400u
AMD Ryzen 3 5125c Firmware<cezannepi-fp6_1.0.0.fa
AMD Ryzen 3 5125c
AMD Ryzen 9 6980hx Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 9 6980hx
AMD Ryzen 9 6980hs Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 9 6980hs
AMD Ryzen 9 6900hx Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 9 6900hx
AMD Ryzen 9 6900hs Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 9 6900hs
AMD Ryzen 7 6800h Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 7 6800h
AMD Ryzen 7 6800hs Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 7 6800hs
AMD Ryzen 7 6800u Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 7 6800u
AMD Ryzen 5 6600h Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 6600h
AMD Ryzen 5 6600hs Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 6600hs
AMD Ryzen 5 6600u Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 6600u
AMD Ryzen 7 7735hs Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 7 7735hs
AMD Ryzen 7 7736u Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 7 7736u
AMD Ryzen 7 7735u Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 7 7735u
AMD Ryzen 5 7535hs Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 7535hs
AMD Ryzen 5 7535u Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 5 7535u
AMD Ryzen 3 7335u Firmware<rembrandtpi-fp7_1.0.0.9b
AMD Ryzen 3 7335u
AMD Ryzen 9 Pro 7940hs Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 9 Pro 7940hs
AMD Ryzen 9 7940h Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 9 7940h
AMD Ryzen 7 Pro 7840hs Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 7 Pro 7840hs
AMD Ryzen 7 7840h Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 7 7840h
AMD Ryzen 7 Pro 7840u Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 7 Pro 7840u
AMD Ryzen 5 Pro 7640hs Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7640hs
AMD Ryzen 5 7640h Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 7640h
AMD Ryzen 5 Pro 7640u Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7640u
AMD Ryzen 5 Pro 7545u Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7545u
AMD Ryzen 5 Pro 7540u Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 5 Pro 7540u
AMD Ryzen 3 7440u Firmware<phoenixpi-fp8-fp7_1.0.0.2
AMD Ryzen 3 7440u
Event History
Nov 14, 2023
CVE Published
06:55 PM
Data Sourced
06:55 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-20596?
CVE-2023-20596 is considered a critical vulnerability allowing potential arbitrary code execution due to improper input validation.
2
How do I fix CVE-2023-20596?
To fix CVE-2023-20596, update the affected AMD firmware to the latest version that patches the vulnerability.
3
Which AMD products are affected by CVE-2023-20596?
Affected products include various AMD Ryzen firmware versions up to comboam4v2_1.2.0.b and comboam5pi_1.0.8.0.
4
What type of attack is associated with CVE-2023-20596?
CVE-2023-20596 is associated with attacks that exploit improper input validation in the SMM Supervisor to gain Ring0 access.
5
Is CVE-2023-20596 a hardware or software vulnerability?
CVE-2023-20596 is primarily a firmware vulnerability affecting the software layer that interacts with AMD hardware.