AR
Product
AMD Radeon™ RX 7000 Series Graphics Products
25
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 14Medium 7Low 4
Watch
Add AMD Radeon™ RX 7000 Series Graphics Products to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36323 | 8.8 | May 15 | Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG… Affected: All versions, or not specified |
| CVE-2023-31317 | 8.8 | May 15 | Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially… Affected: All versions, or not specified |
| CVE-2024-36324 | 8.8 | Feb 11 | Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution Affected: All versions, or not specified |
| CVE-2024-36342 | 8.8 | Sep 6 | Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution Affected: All versions, or not specified |
| CVE-2023-20514 | 8.7 | Feb 11 | Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution… Affected: All versions, or not specified |
| CVE-2023-31322 | 8.7 | Sep 6 | Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially… Affected: All versions, or not specified |
| CVE-2024-36352 | 8.4 | Sep 6 | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service Affected: All versions, or not specified |
| CVE-2024-36333 | 7.8 | May 15 | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution Affected: All versions, or not specified |
| CVE-2025-48503 | 7.8 | Feb 11 | A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution Affected: All versions, or not specified |
| CVE-2023-31325 | 7.2 | Sep 6 | Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in… Affected: All versions, or not specified |
| CVE-2021-46747 | 7.1 | Jun 1 | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management… Affected: All versions, or not specified |
| CVE-2023-31316 | 7.1 | May 15 | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to… Affected: All versions, or not specified |
| CVE-2024-36334 | 7.0 | May 15 | Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges… Affected: All versions, or not specified |
| CVE-2024-36320 | 7.0 | Feb 11 | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability Affected: All versions, or not specified |
Showing 14
