CVE-2023-20578

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Aug 13, 2024
Source updated: Mar 18, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AMD EPYC™ 7001 Processors

Vendor: AMD
Product: AMD EPYC™ 7001 Processors
Platforms: Unknown
Default status: affected
Package: PI

AMD EPYC™ 7001 Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
NaplesPI 1.0.0.K	`unaffected`	PI	Unavailable	Unavailable	None listed

AMD EPYC™ 7002 Processors

Vendor: AMD
Product: AMD EPYC™ 7002 Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 7002 Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RomePI 1.0.0.G	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 7003 Processors

Vendor: AMD
Product: AMD EPYC™ 7003 Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 7003 Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MilanPI 1.0.0.B	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ 9004 Processors

Vendor: AMD
Product: AMD EPYC™ 9004 Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 9004 Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
GenoaPI 1.0.0.2	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 7000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM5 1.0.0.1	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 5000WX Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Platforms: Unknown
Default status: unaffected

AMD Ryzen™ Threadripper™ PRO 5000WX Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.7	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MendocinoPI-FT6 1.0.0.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.9b	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.9b	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 3000

Vendor: AMD
Product: AMD EPYC™ Embedded 3000
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 3000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
SnowyOwl PI 1.1.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7002

Vendor: AMD
Product: AMD EPYC™ Embedded 7002
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7002 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbRomePI-SP3 1.0.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7003

Vendor: AMD
Product: AMD EPYC™ Embedded 7003
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7003 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbMilanPI-SP3 1.0.0.7	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 9003

Vendor: AMD
Product: AMD EPYC™ Embedded 9003
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 9003 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbGenoaPI-SP5 1.0.0.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded 7000

Vendor: AMD
Product: AMD Ryzen™ Embedded 7000
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded 7000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedAM5PI 1.0.0.0	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD RyzenTM Embedded V3000

Vendor: AMD
Product: AMD RyzenTM Embedded V3000
Platforms: Unknown
Default status: affected

AMD RyzenTM Embedded V3000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP7r2 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed