CVE-2023-20596: AMD Ryzen 3 5125c Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Affected products

• AMD Ryzen 3 5125c Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 3 5300g Firmware: before comboam4v2_1.2.0.b (fixed in comboam4v2_1.2.0.b)
• AMD Ryzen 3 5300ge Firmware: before comboam4v2_1.2.0.b (fixed in comboam4v2_1.2.0.b)
• AMD Ryzen 3 5400u Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 3 5425u Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 3 7335u Firmware: before rembrandtpi-fp7_1.0.0.9b (fixed in rembrandtpi-fp7_1.0.0.9b)
• AMD Ryzen 3 7440u Firmware: before phoenixpi-fp8-fp7_1.0.0.2 (fixed in phoenixpi-fp8-fp7_1.0.0.2)
• AMD Ryzen 5 5500h Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 5 5560u Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 5 5600g Firmware: before comboam4v2_1.2.0.b (fixed in comboam4v2_1.2.0.b)
• AMD Ryzen 5 5600ge Firmware: before comboam4v2_1.2.0.b (fixed in comboam4v2_1.2.0.b)
• AMD Ryzen 5 5600h Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 5 5600hs Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 5 5600u Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 5 5625u Firmware: before cezannepi-fp6_1.0.0.fa (fixed in cezannepi-fp6_1.0.0.fa)
• AMD Ryzen 5 6600h Firmware: before rembrandtpi-fp7_1.0.0.9b (fixed in rembrandtpi-fp7_1.0.0.9b)
• AMD Ryzen 5 6600hs Firmware: before rembrandtpi-fp7_1.0.0.9b (fixed in rembrandtpi-fp7_1.0.0.9b)
• AMD Ryzen 5 6600u Firmware: before rembrandtpi-fp7_1.0.0.9b (fixed in rembrandtpi-fp7_1.0.0.9b)
• AMD Ryzen 5 7500f Firmware: before comboam5pi_1.0.8.0 (fixed in comboam5pi_1.0.8.0)
• AMD Ryzen 5 7535hs Firmware: before rembrandtpi-fp7_1.0.0.9b (fixed in rembrandtpi-fp7_1.0.0.9b)
• AMD Ryzen 5 7535u Firmware: before rembrandtpi-fp7_1.0.0.9b (fixed in rembrandtpi-fp7_1.0.0.9b)
• AMD Ryzen 5 7600 Firmware: before comboam5pi_1.0.8.0 (fixed in comboam5pi_1.0.8.0)
• AMD Ryzen 5 7600x Firmware: before comboam5pi_1.0.8.0 (fixed in comboam5pi_1.0.8.0)
• AMD Ryzen 5 7640h Firmware: before phoenixpi-fp8-fp7_1.0.0.2 (fixed in phoenixpi-fp8-fp7_1.0.0.2)
• AMD Ryzen 5 Pro 7540u Firmware: before phoenixpi-fp8-fp7_1.0.0.2 (fixed in phoenixpi-fp8-fp7_1.0.0.2)
• and 39 more

Published 2023-11-14. Last modified 2026-06-17.