#VU79239 Division by zero in AMD products - CVE-2023-20588

Vulnerability identifier: #VU79239

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-20588

CWE-ID: CWE-369

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
AMD EPYC 7001 Processors
AMD Athlon 3000 Series Processors with Radeon Graphics
AMD Ryzen 3000 Series Processors with Radeon Graphics
AMD Athlon PRO 3000 Series Processors with Radeon Vega Graphics
AMD Ryzen PRO 3000 Series Processors with Radeon Vega Graphics

Software vendor:
AMD

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a divide by zero error that can return speculative data. A local user can gain access to potentially sensitive information.

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7007.html