AMD OverDrive Improper Input Validation Vulnerability Allowing Out-of-Bounds Read in System Management Mode

A vulnerability has been identified in the AMD OverDrive System Management Mode (SMM) module, where improper input validation could enable a privileged attacker to perform an out-of-bounds read. This issue has the potential to result in a loss of confidentiality.

Impact

Exploitation of this vulnerability could lead to unauthorized out-of-bounds memory access, potentially allowing for the disclosure of sensitive information.

Remediation

Users are advised to update to the Platform Initialization (PI) firmware version embeddedAM5PI 1.0.0.4, which is available through AMD's Original Equipment Manufacturers (OEM).