{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-14T17:49:38.814","vulnerabilities":[{"cve":{"id":"CVE-2023-20582","sourceIdentifier":"psirt@amd.com","published":"2025-02-11T22:15:26.347","lastModified":"2025-02-11T22:15:26.347","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity."},{"lang":"es","value":"La gestión inadecuada de entradas de tablas de páginas anidadas no válidas en IOMMU puede permitir que un atacante privilegiado induzca fallas en las entradas de tablas de páginas (PTE) para eludir las verificaciones de RMP en SEV-SNP, lo que podría llevar a una pérdida de integridad de la memoria del invitado."}],"metrics":{"cvssMetricV31":[{"source":"psirt@amd.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1\/AV:L\/AC:H\/PR:H\/UI:N\/S:C\/C:N\/I:H\/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":4.0}]},"weaknesses":[{"source":"psirt@amd.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1284"}]}],"references":[{"url":"https:\/\/www.amd.com\/en\/resources\/product-security\/bulletin\/amd-sb-3009.html","source":"psirt@amd.com"},{"url":"https:\/\/www.amd.com\/en\/resources\/product-security\/bulletin\/amd-sb-5004.html","source":"psirt@amd.com"}]}}]}