AR
Product
AMD Radeon™ PRO W5000 Series Graphics Products
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 0Low 3
Watch
Add AMD Radeon™ PRO W5000 Series Graphics Products to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36324 | 8.8 | Feb 11 | Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution Affected: All versions, or not specified |
| CVE-2023-31323 | 8.4 | Feb 12 | Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to… Affected: All versions, or not specified |
| CVE-2024-36333 | 7.8 | May 15 | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution Affected: All versions, or not specified |
| CVE-2023-20548 | 7.8 | Feb 11 | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or… Affected: All versions, or not specified |
| CVE-2023-31324 | 7.8 | Feb 11 | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA)… Affected: All versions, or not specified |
| CVE-2025-48503 | 7.8 | Feb 11 | A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution Affected: All versions, or not specified |
| CVE-2021-46747 | 7.1 | Jun 1 | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management… Affected: All versions, or not specified |
| CVE-2021-26381 | 7.1 | Feb 10 | Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially… Affected: All versions, or not specified |
| CVE-2024-36320 | 7.0 | Feb 11 | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability Affected: All versions, or not specified |
| CVE-2022-23826 | 1.8 | May 15 | A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of… Affected: All versions, or not specified |
| CVE-2021-26380 | 1.8 | May 15 | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity Affected: All versions, or not specified |
| CVE-2021-26410 | 1.8 | Feb 10 | Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer… Affected: All versions, or not specified |
Showing 12
