DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
AMD Radeon: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-08-13
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Radeon ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-31309US | — | — | ||
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potent… | ||||
| CVE-2023-31310US | — | — | ||
Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, pot… | ||||
| CVE-2023-31307US | medium4.4 | — | ||
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a d… | ||||
| CVE-2023-31305US | — | — | ||
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug… | ||||
| CVE-2023-31304US | — | — | ||
Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to modify the PCIe® lane count and speed, potentially leading t… | ||||
| CVE-2023-20513US | — | — | ||
An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) to send a malformed message, potentially… | ||||
| CVE-2023-20512US | —OT erhöht | — | ||
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage. | ||||
| CVE-2023-20510US | medium6.0 | — | ||
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of… | ||||
| CVE-2023-20509US | — | — | ||
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data in… | ||||
| CVE-2021-26367US | medium6.0 | — | ||
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- HP Security Bulletin HPSBHF03965 vom 2024-08-08external
- HP Security Bulletin HPSBHF04121 vom 2026-05-15external
- Lenovo Security Advisory LEN-164067 vom 2024-08-14external
- Lenovo Security Advisory LEN-212210 vom 2026-05-13external
- WID-SEC-W-2024-1841 - CSAF Versionself
- WID-SEC-2024-1841 - Portal Versionself
- AMD Security Bulletin vom 2024-08-13external
- Dell Security Advisory DSA-2026-071 vom 2026-05-14external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan