Radeon Software

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-14	CVE-2021-46748	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service. local low complexity intel amd CWE-119	5.5
2023-11-14	CVE-2023-20567	Improper Verification of Cryptographic Signature vulnerability in multiple products Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution. local low complexity intel amd CWE-347	6.7
2023-11-14	CVE-2023-20568	Improper Verification of Cryptographic Signature vulnerability in multiple products Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution. local low complexity intel amd CWE-347	6.7
2023-11-14	CVE-2023-31320	Improper Input Validation vulnerability in AMD products Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service. network low complexity amd CWE-20	7.5
2023-10-17	CVE-2023-20598	Unspecified vulnerability in AMD Radeon Software 23.7.1/23.Q3 An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution. local low complexity amd	7.8
2023-08-08	CVE-2023-20586	Unspecified vulnerability in AMD Radeon Software A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. network low complexity amd critical	9.8
2022-11-09	CVE-2020-12930	Unspecified vulnerability in AMD products Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity. local low complexity amd	7.8
2022-11-09	CVE-2020-12931	Unspecified vulnerability in AMD products Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity. local low complexity amd	7.8
2022-11-09	CVE-2021-26360	Unspecified vulnerability in AMD products An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. local low complexity amd	7.8
2022-11-09	CVE-2021-26391	Unspecified vulnerability in AMD products Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel. local low complexity amd	7.8