Vulnerabilities > AMD

DATE CVE VULNERABILITY TITLE RISK
2020-05-18 CVE-2019-7246 Unspecified vulnerability in AMD Atillk64 5.11.9.0
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0.
local
low complexity
amd
6.7
2020-04-27 CVE-2020-12138 Missing Authorization vulnerability in AMD Atillk64 5.11.9.0
AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process.
network
low complexity
amd CWE-862
8.8
2020-02-12 CVE-2020-8950 Link Following vulnerability in AMD User Experience Program 1.0.0.1
The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an arbitrary file name.
local
low complexity
amd CWE-59
7.8
2020-01-25 CVE-2019-5183 Type Confusion vulnerability in AMD Atidxx64 26.20.13031.10003/26.20.13031.15006/26.20.13031.18002
An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002.
network
high complexity
amd CWE-843
critical
9.0
2020-01-25 CVE-2019-5147 Out-of-bounds Read vulnerability in AMD Atidxx64 26.20.13003.1007
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007.
network
low complexity
amd CWE-125
8.6
2020-01-25 CVE-2019-5146 Out-of-bounds Read vulnerability in AMD Atidxx64 26.20.13025.10004
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004.
network
low complexity
amd CWE-125
8.6
2020-01-25 CVE-2019-5124 Out-of-bounds Read vulnerability in AMD Atidxx64 26.20.13001.50005
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005.
network
low complexity
amd CWE-125
8.6
2019-12-05 CVE-2019-5098 Out-of-bounds Read vulnerability in multiple products
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010.
network
low complexity
vmware amd CWE-125
8.6
2019-10-31 CVE-2019-5049 Out-of-bounds Write vulnerability in AMD products
An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002.
network
low complexity
amd CWE-787
critical
10.0
2019-09-03 CVE-2019-5478 Insufficient Verification of Data Authenticity vulnerability in AMD products
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices.
local
low complexity
amd CWE-345
5.5