PT-2026-33356 · Iommu+1 · Iommu+1

Published 2025-07-03 · Updated 2026-04-17 · CVE-2023-20585

Positive Technologies (AI Summary)

CVSS v4.0

5.6

Medium

Base vector

AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions IOMMU (affected versions not specified)

Description Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Memory Location After End of Buffer

Weakness Enumeration

CWE-788

Related Identifiers

BDU:2026-05724

CVE-2023-20585

Affected Products

Iommu

Windows

References · 12

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-20585 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05724 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20585 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-20585 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-20585 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20585 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-20585 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20585 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2044978964964266332 · Twitter Post
• https://twitter.com/CVEnew/status/2045102658487218274 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-3016.html · Note
• https://amd.com/en/resources/product-security/bulletin/amd-sb-3016.html · Note