Radeon PRO Vega 56 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-14	CVE-2021-46748	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service. local low complexity intel amd CWE-119	5.5
2023-11-14	CVE-2023-20567	Improper Verification of Cryptographic Signature vulnerability in multiple products Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution. local low complexity intel amd CWE-347	6.7
2023-11-14	CVE-2023-20568	Improper Verification of Cryptographic Signature vulnerability in multiple products Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution. local low complexity intel amd CWE-347	6.7
2023-11-14	CVE-2023-31320	Improper Input Validation vulnerability in AMD products Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service. network low complexity amd CWE-20	7.5