EUVD-2022-28755
GHSA-2vw3-5r88-9c5p
Severity by source
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.
AnalysisAI
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity. Rated low severity (CVSS 1.8). No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-367. A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity. Affected products include: Amd Amd Ryzen™ 3000 Series Mobile Processors With Radeon™ Graphics, Amd Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics, Amd Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics, Amd Amd Ryzen™ Embedded R1000 Series Processors, Amd Amd Ryzen™ Embedded R2000 Series Processors.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Local privilege escalation in the AMD Platform Configuration Blob (APCB) SMM driver, shipped in AGESA firmware across ne
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user sp
DDR5 memory modules in multiple AMD Ryzen processor families contain an insecure default PMIC (Power Management Integrat
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today