CVE-2023-20577

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Sep 2, 2026
Source updated: Sep 4, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

2nd Gen AMD EPYC™ Processors

Vendor: AMD
Product: 2nd Gen AMD EPYC™ Processors
Platforms: Unknown
Default status: affected

2nd Gen AMD EPYC™ Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RomePI 1.0.0.H	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

3rd Gen AMD EPYC™ Processors

Vendor: AMD
Product: 3rd Gen AMD EPYC™ Processors
Platforms: Unknown
Default status: affected

3rd Gen AMD EPYC™ Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MilanPI 1.0.0.C	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

4th Gen AMD EPYC™ Processors

Vendor: AMD
Product: 4th Gen AMD EPYC™ Processors
Platforms: Unknown
Default status: affected

4th Gen AMD EPYC™ Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
GenoaPI 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Instinct™ MI300A

Vendor: AMD
Product: AMD Instinct™ MI300A
Platforms: Unknown
Default status: affected

AMD Instinct™ MI300A · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MI300 SR5 PI 1.0.0.1	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2 1.2.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed
ComboAM4 1.0.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2 1.2.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2 1.2.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ 7000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM5 1.0.0.7b	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2 1.2.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed
ComboAM4 1.0.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4v2 1.2.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ 3000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ 3000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ 3000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CastlePeakPI-SP3r3 1.0.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.7	`unaffected`	Unavailable	Unavailable	Unavailable	None listed
CastlePeakWSPI-sWRX8 1.0.0.C	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 5000WX Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 5000WX Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.7	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PicassoPI-FP5 1.0.1.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PollockPI-FT5 1.0.0.6	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PicassoPI-FP5 1.0.1.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RenoirPI-FP6 1.0.0.D	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MendocinoPI-FT6 1.0.0.6	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.9b	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.9b	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.F	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
PhoenixPI-FP8-FP7 1.0.0.2	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7045 Series Mobile Processors

Vendor: AMD
Product: AMD Ryzen™ 7045 Series Mobile Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7045 Series Mobile Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
DragonRangeFL1PI 1.0.0.3a	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 3000

Vendor: AMD
Product: AMD EPYC™ Embedded 3000
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 3000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Snowyowl PI 1.1.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7002

Vendor: AMD
Product: AMD EPYC™ Embedded 7002
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7002 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbRomePI-SP3 1.0.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7003

Vendor: AMD
Product: AMD EPYC™ Embedded 7003
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7003 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbMilanPI-SP3 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 9003

Vendor: AMD
Product: AMD EPYC™ Embedded 9003
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 9003 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbGenoaPI-SP5 1.0.0.3	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded R1000

Vendor: AMD
Product: AMD Ryzen™ Embedded R1000
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded R1000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP5 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded R2000

Vendor: AMD
Product: AMD Ryzen™ Embedded R2000
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded R2000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP5 1.0.0.2	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded 5000

Vendor: AMD
Product: AMD Ryzen™ Embedded 5000
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded 5000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbAM4PI 1.0.0.4	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V1000

Vendor: AMD
Product: AMD Ryzen™ Embedded V1000
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V1000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP5 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V2000

Vendor: AMD
Product: AMD Ryzen™ Embedded V2000
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V2000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP6 1.0.0.9	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V3000

Vendor: AMD
Product: AMD Ryzen™ Embedded V3000
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V3000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP7r2 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed