CVE-2023-20555

Publication date

2023-08-08 17:07:24

Family

AMD

State

PUBLISHED

Description

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.