CVE-2022-23813: AMD Milanpi-SP3 Firmware

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment.

Affected products

• AMD Milanpi-SP3 Firmware: before 1.0.0.9 (fixed in 1.0.0.9)
• AMD Romepi Firmware: before 1.0.0.e (fixed in 1.0.0.e)

Published 2023-01-11. Last modified 2026-06-17.