CVE-2023-20518

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Aug 13, 2024
Source updated: Nov 5, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AMD EPYC™ 9004 Series Processors

Vendor: AMD
Product: AMD EPYC™ 9004 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 9004 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
GenoaPI 1.0.0.4	`unaffected`	PI	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4V1 1.0.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed
ComboAM4V2 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4V2 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4V2 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 7000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM5 1.0.0.6	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4V2 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed
ComboAM4V1 1.0.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4V2 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ 3000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ 3000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ 3000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CastlePeakPI-SP3r3 1.0.0.9	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.6	`unaffected`	Unavailable	Unavailable	Unavailable	None listed
CastlePeakWSPI-sWRX8 1.0.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 5000WX Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 5000WX Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.6	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PicassoPI-FP5 1.0.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PollockPI-FT5 1.0.0.5	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PicassoPI-FP5 1.0.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RenoirPI-FP6 1.0.0.C	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MendocinoPI-FT6 1.0.0.4	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded R1000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded R1000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded R1000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP5 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded R2000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded R2000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded R2000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedR2KPI-FP5 1.0.0.2	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded 5000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded 5000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded 5000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbAM4PI 1.0.0.3	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded 7000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded 7000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded 7000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedAM5PI 1.0.0.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V1000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V1000 Series Processors
Platforms: Unknown
Default status: unaffected

AMD Ryzen™ Embedded V1000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V2000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V2000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V2000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP6 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V3000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V3000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V3000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP7r2 1.0.0.5	`unaffected`	Unavailable	Unavailable	Unavailable	None listed