CVE-2023-20555: AMD Athlon 3015ce Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

Affected products

• AMD Athlon 3015ce Firmware: before pollockpi-ft5_1.0.0.5 (fixed in pollockpi-ft5_1.0.0.5)
• AMD Athlon 3015e Firmware: before pollockpi-ft5_1.0.0.5 (fixed in pollockpi-ft5_1.0.0.5)
• AMD Athlon Gold 3150c Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Athlon Gold 3150g Firmware: before comboam4piv1_1.0.0.a (fixed in comboam4piv1_1.0.0.a); before comboam4v2_1.2.0.a (fixed in comboam4v2_1.2.0.a)
• AMD Athlon Gold 3150ge Firmware: before comboam4piv1_1.0.0.a (fixed in comboam4piv1_1.0.0.a); before comboam4v2_1.2.0.a (fixed in comboam4v2_1.2.0.a)
• AMD Athlon Gold 3150u Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Athlon Gold Pro 3150g Firmware: before comboam4piv1_1.0.0.a (fixed in comboam4piv1_1.0.0.a); before comboam4v2_1.2.0.a (fixed in comboam4v2_1.2.0.a)
• AMD Athlon Gold Pro 3150ge Firmware: before comboam4piv1_1.0.0.a (fixed in comboam4piv1_1.0.0.a); before comboam4v2_1.2.0.a (fixed in comboam4v2_1.2.0.a)
• AMD Athlon Pro 300ge Firmware: before comboam4piv1_1.0.0.a (fixed in comboam4piv1_1.0.0.a); before comboam4v2_1.2.0.a (fixed in comboam4v2_1.2.0.a)
• AMD Athlon Pro 3045b Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Athlon Pro 3145b Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Athlon Silver 3050c Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Athlon Silver 3050e Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Athlon Silver 3050u Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Ryzen 3 3300 Firmware: before comboam4_pi_v1_1.0.0.a (fixed in comboam4_pi_v1_1.0.0.a); before comboam4v2_pi_1.2.0.a (fixed in comboam4v2_pi_1.2.0.a)
• AMD Ryzen 3 3300u Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Ryzen 3 3300x Firmware: before comboam4_pi_v1_1.0.0.a (fixed in comboam4_pi_v1_1.0.0.a); before comboam4v2_pi_1.2.0.a (fixed in comboam4v2_pi_1.2.0.a)
• AMD Ryzen 3 3350u Firmware: before picassopi-fp5_1.0.0.f (fixed in picassopi-fp5_1.0.0.f)
• AMD Ryzen 3 4100 Firmware: before comboam4v2_pi_1.2.0.a (fixed in comboam4v2_pi_1.2.0.a)
• AMD Ryzen 3 4300u Firmware: before renoirpi-fp6_1.0.0.b (fixed in renoirpi-fp6_1.0.0.b)
• AMD Ryzen 3 5100 Firmware: before comboam4v2_pi_1.2.0.a (fixed in comboam4v2_pi_1.2.0.a)
• AMD Ryzen 3 5125c Firmware: before cezannepi-fp6_1.0.0.e (fixed in cezannepi-fp6_1.0.0.e)
• AMD Ryzen 3 5300g Firmware: before comboam4v2_pi_1.2.0.a (fixed in comboam4v2_pi_1.2.0.a)
• AMD Ryzen 3 5300ge Firmware: before comboam4v2_pi_1.2.0.a (fixed in comboam4v2_pi_1.2.0.a)
• AMD Ryzen 3 5300u Firmware: before cezannepi-fp6_1.0.0.e (fixed in cezannepi-fp6_1.0.0.e)
• and 94 more

Published 2023-08-08. Last modified 2026-06-17.