picassopi.fp5.1.0.0.e

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-14	CVE-2022-23820	Improper Input Validation vulnerability in AMD products Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. network low complexity amd CWE-20 critical	9.8
2023-11-14	CVE-2022-23821	Unspecified vulnerability in AMD products Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. network low complexity amd critical	9.8
2023-08-08	CVE-2023-20555	Out-of-bounds Write vulnerability in AMD products Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. local low complexity amd CWE-787	7.8
2022-07-14	CVE-2021-26382	Unspecified vulnerability in AMD products An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service. local low complexity amd	4.4