Vulnerabilities > CVE-2023-20519 - Use After Free vulnerability in AMD Genoapi Firmware and Milanpi Firmware

047910
CVSS 3.3 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
local
low complexity
amd
CWE-416

Summary

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.

Vulnerable Configurations

Part Description Count
OS
Amd
2
Hardware
Amd
2

Common Weakness Enumeration (CWE)