VDB
CVE-2023-20507
CVE-2023-20507
PUBLISHED
CVSS 2.3 LOW
Reported by amd · Published February 11, 2025
An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.
Risk scores
CVSS 3.1
2.3
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| AMD | AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | ComboAM4V2 1.2.0.A |
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | ComboAM5 1.0.0.6 |
| AMD | AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | ComboAM4V2 1.2.0.A |
| AMD | AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics | ComboAM4V2 1.2.0.A |
| AMD | AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics | ComboAM5 1.0.0.6 |
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | RenoirPI-FP6 1.0.0.C |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics | CezannePI-FP6 1.0.0.E |
| AMD | AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | MendocinoPI-FT6 1.0.0.5 |
| AMD | AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics | RembrandtPI-FP7 1.0.0.8 |
| AMD | AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics | RembrandtPI-FP7 1.0.0.8 |
| AMD | AMD Ryzen™ 7000 Series Mobile Processors | DragonRangeFL1 1.0.0.2b |
| AMD | AMD Ryzen™ Embedded 5000 | EmbAM4PI 1.0.0.5 |
| AMD | AMD Ryzen™ Embedded 7000 | EmbeddedAM5PI 1.0.0.0 |
| AMD | AMD Ryzen™ Embedded V2000 | EmbeddedPI-FP6 1.0.0.8 |
| AMD | AMD Ryzen™ Embedded V3000 | EmbeddedPI-FP7r2 1.0.0.6 |
| AMD | AMD Ryzen™ Embedded 7000 | 1.0.0.0 |
| AMD | AMD Ryzen™ Embedded 5000 | 1.0.0.5 |
| AMD | AMD Ryzen™ Embedded V2000 | 1.0.0.8 |
| AMD | AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics | 1.0.0.6 |
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | 1.0.0.6 |
…and 10 more
Timeline
- Feb 11, 2025 CVE Published
- Feb 11, 2025 PoC Published (2 in total, the first dated here)
- Feb 11, 2025 CVE Updated
- Feb 12, 2025 EPSS Score (30 in total, the first dated here)
- May 21, 2026 Coalition ESS Score
- Jun 2, 2026 Security Advisory (2 in total, the first dated here)
- Aug 10, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2023-20507
vulnetix vdb fixes CVE-2023-20507Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-20507/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart