CVE-2022-23815

published 2024-08-13

CVE-2022-23815: Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary…

Priority P3 38 high 8.2 CVSS 3.1

AV L AC L PR H UI N S C C H I H A H

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
amd	amd_athlon_3000_series_desktop_processors_with_radeon_graphics	—	—
amd	athlon_gold_3150u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	athlon_silver_3050u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_3_3200u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_3_3250u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_3_3300u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_5_3500u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_5_3550h_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_5_3580u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_3700u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_3750h_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_3780u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e
amd	ryzen_7_pro_3700u_firmware	< picassopi-fp5_1.0.0.e	picassopi-fp5_1.0.0.e

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-787