CVE-2023-20508

{"id": "CVE-2023-20508", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@amd.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 0.8}]}, "published": "2025-02-12T00:15:07.850", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6008.html", "source": "psirt@amd.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@amd.com", "description": [{"lang": "en", "value": "CWE-1284"}]}], "descriptions": [{"lang": "en", "value": "Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability."}, {"lang": "es", "value": "Un control de acceso inadecuado en el ASP podr\u00eda permitir que un atacante privilegiado realice una escritura fuera de los l\u00edmites en una ubicaci\u00f3n de memoria no controlada por el atacante, lo que podr\u00eda provocar una p\u00e9rdida de confidencialidad, integridad o disponibilidad."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "psirt@amd.com"}