AR
Product
AMD Radeon™ VII
10
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 2Low 2
Watch
Add AMD Radeon™ VII to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20514 | 8.7 | Feb 11 | Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution… Affected: All versions, or not specified |
| CVE-2023-31323 | 8.4 | Feb 12 | Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to… Affected: No fix planned |
| CVE-2024-36352 | 8.4 | Sep 6 | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service Affected: All versions, or not specified |
| CVE-2024-36333 | 7.8 | May 15 | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution Affected: All versions, or not specified |
| CVE-2023-20548 | 7.8 | Feb 11 | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or… Affected: All versions, or not specified |
| CVE-2024-36320 | 7.0 | Feb 11 | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability Affected: All versions, or not specified |
| CVE-2025-0010 | 6.1 | Sep 6 | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidentiality, integrity, or availability Affected: All versions, or not specified |
| CVE-2023-20601 | 4.6 | Feb 12 | Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially resulting in a denial-of-service condition Affected: All versions, or not specified |
| CVE-2022-23826 | 1.8 | May 15 | A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of… Affected: All versions, or not specified |
| CVE-2021-26380 | 1.8 | May 15 | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity Affected: All versions, or not specified |
Showing 10
