DeutschShown in its original language — a full translation is planned for a future version.
AMD Radeon Graphics Products: Mehrere Schwachstellen
view advisory published 2025-08-12
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Radeon ausnutzen, um sich erhöhte Privilegien zu verschaffen, beliebigen Code auszuführen, einen Denial of Service-Zustand herbeizuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder nicht näher spezifizierte Angriffe durchzuführen.
01
describes (22)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31308US | — | — | ||
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read. | ||||
| CVE-2023-20511US | — | — | ||
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to arbitrary code executio… | ||||
| CVE-2025-48508US | — | — | ||
Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host… | ||||
| CVE-2025-0034US | — | — | ||
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cause read or write past the end of allocat… | ||||
| CVE-2025-0011US | — | — | ||
Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in los… | ||||
| CVE-2025-0010US | — | — | ||
An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidentiality, integrity, or availability. | ||||
| CVE-2025-0009US | — | — | ||
A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a system crash and loss of availability. | ||||
| CVE-2024-36352US | — | — | ||
Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service. | ||||
| CVE-2024-36346US | — | — | ||
Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condi… | ||||
| CVE-2024-36342US | — | — | ||
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution. | ||||
| CVE-2023-31365US | — | — | ||
An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area resulting in loss of integrity or availability… | ||||
| CVE-2023-31326US | — | — | ||
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confid… | ||||
| CVE-2023-31325US | — | — | ||
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in lo… | ||||
| CVE-2023-31322US | — | — | ||
Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially leading… | ||||
| CVE-2023-31306US | — | — | ||
Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions result… | ||||
| CVE-2023-20516US | — | — | ||
Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in loss of confidentiali… | ||||
| CVE-2021-46750US | — | — | ||
Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in a… | ||||
| CVE-2021-26377US | — | — | ||
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trigger an integer overflow, leading to a po… | ||||
| CVE-2021-26383US | — | — | ||
Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised userspace to invoke a command with malformed arguments leading to… | ||||
| CVE-2021-46745US | — | — | ||
showing 20 of 22
02
references
External citations — patches, advisories, analysis.
- HP Security Bulletin HPSBHF04059 vom 2025-09-15external
- HP Security Bulletin HPSBHF04073 vom 2025-10-09external
- Lenovo Security Advisory LEN-196649 vom 2025-08-13external
- WID-SEC-W-2025-1767 - CSAF Versionself
- WID-SEC-2025-1767 - Portal Versionself
- AMD Security Bulletin AMD-SB-6018 vom 2025-08-12external
- Dell Security Advisory DSA-2025-322 vom 2025-08-14external
- Dell Security Advisory DSA-2025-231 vom 2025-08-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan