DeutschShown in its original language — a full translation is planned for a future version.
AMD Radeon: Mehrere Schwachstellen
view advisory published 2024-08-13
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Radeon ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31309US | — | — | ||
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potent… | ||||
| CVE-2023-31310US | — | — | ||
Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, pot… | ||||
| CVE-2023-31307US | medium4.4 | — | ||
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a d… | ||||
| CVE-2023-31305US | — | — | ||
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug… | ||||
| CVE-2023-31304US | — | — | ||
Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to modify the PCIe® lane count and speed, potentially leading t… | ||||
| CVE-2023-20513US | — | — | ||
An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) to send a malformed message, potentially… | ||||
| CVE-2023-20512US | —OT elevated | — | ||
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage. | ||||
| CVE-2023-20510US | medium6.0 | — | ||
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of… | ||||
| CVE-2023-20509US | — | — | ||
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data in… | ||||
| CVE-2021-26367US | medium6.0 | — | ||
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a… | ||||
02
references
External citations — patches, advisories, analysis.
- HP Security Bulletin HPSBHF03965 vom 2024-08-08external
- HP Security Bulletin HPSBHF04121 vom 2026-05-15external
- Lenovo Security Advisory LEN-164067 vom 2024-08-14external
- Lenovo Security Advisory LEN-212210 vom 2026-05-13external
- WID-SEC-W-2024-1841 - CSAF Versionself
- WID-SEC-2024-1841 - Portal Versionself
- AMD Security Bulletin vom 2024-08-13external
- Dell Security Advisory DSA-2026-071 vom 2026-05-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan