Read the docs
TI-2022-07835 Aliases CVE-2022-23815GHSA-cjjq-cwpw-fx4q

Out-of-bounds write in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Priority LOW 37CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00163 5th percentileScored 2026-11-07
Fix Fixed AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (AMD): PicassoPI-FP5 1.0.0.F, PollockPI-FT5 1.0.0.5AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics (AMD): PicassoPI-FP5 1.0.0.E+3 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphicsvarious and later—No fix listedCNA
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics—PicassoPI-FP5 1.0.0.FPatch availableCNA
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics—PollockPI-FT5 1.0.0.5Patch availableCNA
AMDAMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics—PicassoPI-FP5 1.0.0.EPatch availableCNA
AMDAMD RyzenTM Embedded R1000—EmbeddedPI-FP5 1.2.0.APatch availableCNA
AMDAMD RyzenTM Embedded R2000—EmbeddedR2KPI-FP5 1.0.0.2Patch availableCNA
AMDAMD RyzenTM Embedded V1000—EmbeddedPI-FP5 1.2.0.APatch availableCNA
  • AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics VendorAMD Affected various and later Fixed in — No fix listed CNA
  • AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in PicassoPI-FP5 1.0.0.F Patch available CNA
  • AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in PollockPI-FT5 1.0.0.5 Patch available CNA
  • AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics VendorAMD Affected — Fixed in PicassoPI-FP5 1.0.0.E Patch available CNA
  • AMD RyzenTM Embedded R1000 VendorAMD Affected — Fixed in EmbeddedPI-FP5 1.2.0.A Patch available CNA
  • AMD RyzenTM Embedded R2000 VendorAMD Affected — Fixed in EmbeddedR2KPI-FP5 1.0.0.2 Patch available CNA
  • AMD RyzenTM Embedded V1000 VendorAMD Affected — Fixed in EmbeddedPI-FP5 1.2.0.A Patch available CNA

CPE configurations NVD · 32

CPEVersionsRoleVendor
cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_7_3780u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_7_3750h:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_7_pro_3700u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_7_pro_3700u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:athlon_silver_3050u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:athlon_gold_3150u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_7_3780u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_7_3750h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_7_pro_3700u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_7_pro_3700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 22 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_7_3700u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_5_3580u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_5_3550h:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_5_3500u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:*before picassopi-fp5_1.0.0.eVulnerableAMD
cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:athlon_gold_pro_3150g:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:athlon_gold_3150g:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:athlon_gold_pro_3150ge:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableAMD
cpe:2.3:h:amd:athlon_pro_300ge:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_7_3700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_5_3580u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_5_3550h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_5_3500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:athlon_gold_pro_3150g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:athlon_gold_3150g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:athlon_gold_pro_3150ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
  • cpe:2.3:h:amd:athlon_pro_300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD

Remediation

  • Fix · CNA AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in PicassoPI-FP5 1.0.0.F
  • Fix · CNA AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in PollockPI-FT5 1.0.0.5
  • Fix · CNA AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics (AMD) Fixed in PicassoPI-FP5 1.0.0.E
  • Fix · CNA AMD RyzenTM Embedded R1000 (AMD) Fixed in EmbeddedPI-FP5 1.2.0.A
  • Fix · CNA AMD RyzenTM Embedded R2000 (AMD) Fixed in EmbeddedR2KPI-FP5 1.0.0.2
  • Fix · CNA AMD RyzenTM Embedded V1000 (AMD) Fixed in EmbeddedPI-FP5 1.2.0.A

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-23815
  2. 2026-10-03 Alias added: GHSA-cjjq-cwpw-fx4q

References

Advisory 1

  • TI-2021-21470 Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub… CVSS 3.1CRITICAL 9.1
  • TI-2021-21505 Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 CVSS 3.1HIGH 7.5
  • TI-2021-21471 Improper input validation in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 CVSS 3.1CRITICAL 9.1
  • TI-2021-21468 Out-of-bounds read in AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” CVSS 3.1HIGH 7.5
  • TI-2023-07038 Speculative Leaks CVSS 3.1MEDIUM 5.5
  • TI-2023-07008 Out-of-bounds write in AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 CVSS 3.1HIGH 7.8
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences