Unscored CVE-2020-12944 EUVD-2020-5224GHSA-pfqw-wv4f-fpjx

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

Published Nov 16, 2021 · Updated Sep 16, 2024 · Assigned by AMD

Vendor: AMD Product: Athlon™ Series Product: Ryzen™ Series

Description

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
AMD	Ryzen™ Series	various	—
AMD	Athlon™ Series	various	—

Advisories 1

WID-SEC-2022-0073 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 16, 2025

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027