CVE-2022-23815

published 2024-08-13

CVE-2022-23815: Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary…

high 8.2 CVSS 3.1

AV L AC L PR H UI N S C C H I H A H

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
amd	amd_athlon_3000_series_desktop_processors_with_radeon_graphics	—	—
amd	athlon_gold_3150u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	athlon_silver_3050u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_3_3200u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_3_3250u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_3_3300u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_5_3500u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_5_3550h_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_5_3580u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_3700u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_3750h_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_3780u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_pro_3700u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e

CWE-787