CVE-2023-20521

Publication date

2023-11-14 18:52:31

Family

AMD

State

PUBLISHED

Description

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.