Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-24737 | Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges. |
Thu, 20 Feb 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-670 | |
| Metrics |
ssvc
|
Subscriptions
Status: PUBLISHED
Assigner: AMD
Published:
Updated: 2025-02-20T19:23:58.341Z
Reserved: 2022-10-27T18:53:39.746Z
Link: CVE-2023-20558
Updated: 2024-08-02T09:05:36.894Z
Status : Modified
Published: 2023-04-02T21:15:08.467
Modified: 2025-02-20T20:15:44.643
Link: CVE-2023-20558
No data.
OpenCVE Enrichment
No data.
EUVD