CVE-2022-23815
High
Description
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
SeverityHigh
CVSS7.5
Exploit probability—
ProductAmd Athlon Silver 3050u Firmware
PublishedAug 13, 2024
First seenAug 13, 2024
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- amd athlon_silver_3050u_firmwarepicassopi-fp5_1.0.0.e or later
- amd athlon_gold_3150u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_7_3780u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_7_3750h_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_7_pro_3700u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_7_3700u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3580u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3550h_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3500u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_3_3300u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_3_3250u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_3_3200u_firmwarepicassopi-fp5_1.0.0.e or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd athlon_silver_3050u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_gold_3150u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_3780u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_3750h_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_pro_3700u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_3700u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3580u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3550h_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3500u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_3_3300u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_3_3250u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_3_3200u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_gold_pro_3150g_firmware | No range specified | — |
| amd athlon_gold_3150g_firmware | No range specified | — |
| amd athlon_gold_pro_3150ge_firmware | No range specified | — |
| amd athlon_pro_300ge_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.