Vulnerabilities > AMD > Radeon Software
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-12 | CVE-2024-21937 | Incorrect Default Permissions vulnerability in AMD Radeon Software and Radeon Software for HIP Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. | 7.8 |
| 2024-08-13 | CVE-2021-26367 | Unspecified vulnerability in AMD products A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability. | 6.0 |
| 2024-08-13 | CVE-2023-20510 | Unspecified vulnerability in AMD Radeon Software 23.7.1/23.Q3/23.Q4 An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service. | 6.0 |
| 2024-08-13 | CVE-2023-31307 | Improper Validation of Array Index vulnerability in AMD Radeon Software 23.7.1/23.Q3 Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service. | 4.4 |
| 2023-11-14 | CVE-2021-46748 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service. | 5.5 |
| 2023-11-14 | CVE-2023-20567 | Improper Verification of Cryptographic Signature vulnerability in multiple products Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution. | 6.7 |
| 2023-11-14 | CVE-2023-20568 | Improper Verification of Cryptographic Signature vulnerability in multiple products Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution. | 6.7 |
| 2023-11-14 | CVE-2023-31320 | Improper Input Validation vulnerability in AMD products Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service. | 7.5 |
| 2023-10-17 | CVE-2023-20598 | Unspecified vulnerability in AMD Radeon Software 23.7.1/23.Q3 An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution. | 7.8 |
| 2023-08-08 | CVE-2023-20586 | Unspecified vulnerability in AMD Radeon Software A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. | 9.8 |