CVE-2022-23814: AMD Milanpi-SP3 Firmware

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment.

Affected products

• AMD Milanpi-SP3 Firmware: before 1.0.0.9 (fixed in 1.0.0.9)

Published 2023-01-11. Last modified 2026-06-17.