CVE-2022-23823

CVE-2022-23823: vulnerability in AMD Processors

Published · Updated

Follow this CVE+ Monitor AMD Processors

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
In short

Some AMD processors with frequency scaling features may leak sensitive information through timing attacks if an attacker can measure how long operations take. This could allow someone with access to the system to discover secret data like encryption keys.

Technical detail

A timing side-channel vulnerability in AMD frequency scaling implementations allows an authenticated attacker to infer sensitive information by analyzing performance variations during cryptographic operations. The attack requires local access and ability to measure instruction execution times, potentially compromising confidential data through differential analysis.

Summary generated and translated by AI from the official description.
A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.
Affected products
AMD · AMD Processors
Related CVEs — AMD Processors

In the same product, most dangerous first.

CVE-2022-29900—CVE-2022-29900EPSS 3.9%CVE-2022-23825—CVE-2022-23825EPSS 0.8%CVE-2022-23824—CVE-2022-23824EPSS 0.6%CVE-2021-46744—CVE-2021-46744EPSS 0.3%CVE-2021-26341—CVE-2021-26341EPSS 0.3%CVE-2021-26401—CVE-2021-26401EPSS 0.3%