Every CVE Search/ Get API key

CVE-2023-20507

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...

2.3 Low

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.15%Up 0.1 points since Feb 12, 2025
90%50%10%1%

What each source reports

CVE List Score used 2.3

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

Record
CVE-2023-20507
CVSS 3.1
2.3 LowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2023-24686 2.3

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

Record
EUVD-2023-24686
CVSS 3.1
2.3 LowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-8fxq-cfj5-2qpw 2.3

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

Record
GHSA-8fxq-cfj5-2qpw
CVSS 3.1
2.3 LowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-190
Updated
2026-11-02
NVD 2.3

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity.

Record
CVE-2023-20507
CVSS 3.1
2.3 LowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-190
Updated
2026-11-02

Affected products

Show 3 moreShow less

History

History
RecordedChangedSources
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-20507 is a low vulnerability (CVSS 2.3) in Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics, published February 11, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. No source names a fixed version.

References

MoveEnter Open