WID-SEC-W-2023-2898

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

AMD Radeon und Prozessor: Mehrere Schwachstellen

view advisory published 2023-11-14

Ein Angreifer kann mehrere Schwachstellen in AMD Prozessoren und AMD Radeon ausnutzen, um einen Denial of Service Zustand zu erzeugen oder beliebigen Code auszuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2023-31320UShigh7.5Exploit
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.
CVE-2023-20568USmedium6.7—
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the f…
CVE-2023-20567USmedium6.7—
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating…
CVE-2021-46748USmedium5.5—
Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) result…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan