Vulnerability Intelligence Report
CVE-2022-23817
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.
No Active Exploit Signals
CVSS Base Score
7.3
HIGH
EPSS Probability:0.18%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-20 ↗CWE-20 Improper Input Validation
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | PicassoPI-FP5 1.0.0.E (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors | ChagallWSPI-sWRX8 1.0.0.5 (unaffected), CastlePeakWSPI-sWRX8 1.0.0.A (unaffected) |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics | ComboAM4v2 PI 1.2.0.8 (unaffected) |
| AMD | AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors | ChagallWSPI-sWRX8 1.0.0.5 (unaffected) |
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | RenoirPI-FP6 1.0.0.A (unaffected) |
| AMD | AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics | PicassoPI-FP5 1.0.0.E (unaffected) |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | CezannePI-FP6 1.0.0.C (unaffected) |
| AMD | AMD Ryzen™ 3000 Series Desktop Processors | ComboAM4V1 1.0.0.A (unaffected), ComboAM4V2 1.2.0.9 (unaffected) |
| AMD | AMD Ryzen™ 2000 Mobile Processors | ComboAM4v2 PI 1.2.0.8 (unaffected), ComboAM4PI 1.0.0.9 (unaffected) |
| AMD | AMD Ryzen™ 4000 Series Desktop Processors | ComboAM4v2 PI 1.2.0.8 (unaffected) |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors | ComboAM4v2 PI 1.2.0.8 (unaffected) |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | RembrandtPI-FP7_1.0.0.5 (unaffected) |
| AMD | AMD Ryzen™ Embedded R1000 Series Processors | EmbeddedPI-FP5_1.2.0.A (unaffected) |
| AMD | AMD Ryzen™ Embedded R2000 Series Processors | EmbeddedR2KPI-FP5 1.0.0.2 (unaffected) |
| AMD | AMD Ryzen™ Embedded 5000 Series Processors | EmbAM4PI 1.0.0.2 (unaffected) |
| AMD | AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") | EmbeddedPI-FP5_1.2.0.A (unaffected) |
| AMD | AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") | EmbeddedPI-FP5_1.2.0.A (unaffected) |
| AMD | AMD Ryzen™ Embedded V2000 Series Processor | EmbeddedPI-FP6_1.0.0.8 (unaffected) |
| AMD | AMD Ryzen™ Embedded V3000 Series Processors | EmbeddedPI-FP7r2_1002 (unaffected) |
| AMD | AMD Radeon™ RX 5000 Series Graphics Products | AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01) (unaffected) |
| AMD | AMD Radeon™ PRO W5000 Series Graphics Products | AMD Software: PRO Edition 22.Q2 (22.10.20) (unaffected) |
| AMD | AMD Radeon™ RX 6000 Series Graphics Products | AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01) (unaffected) |
| AMD | AMD Radeon™ PRO W6000 Series Graphics Products | AMD Software: PRO Edition 22.Q2 (22.10.20) (unaffected) |
| AMD | MI-25 / 50 | No fix planned (unaffected) |
| AMD | MI-100 | ROCm 6.4.2 (unaffected) |
| AMD | AMD Instinct™ MI250 | ROCm 7.0 (unaffected) |
| AMD | AMD Instinct™ MI210 | ROCm 7.0 (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.182%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2022-01-21T17:14:12 |
| Published | 2024-08-13T16:51:45 |
| Patch Date | 2026-05-15 |
| Last Updated | 2026-05-15T03:03:25 |
Community Chatter & Buzz