CVE-2023-20540

Name of the Vulnerable Software and Affected Versions AMD Secure Processor (affected versions not specified)

Description A timing discrepancy in the ASP and unreliable pointer dereferencing in the AMD Secure Processor firmware for GPUs allow a privileged attacker to perform a brute-force attack against the hash message authentication code. This could enable arbitrary message input and the bypass of existing security restrictions, potentially leading to a loss of data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.