CVE-2022-23814

published 2023-01-11

CVE-2022-23814: Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
amd	3rd_gen_epyc	—	—
amd	milanpi-sp3_firmware	< 1.0.0.9	1.0.0.9

CWE-20 CWE-307