RS
Product
Radeon Software
52
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 35Medium 16Low 0
Watch
Add Radeon Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20568 | 6.7 | Nov 14 | Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the… Affected: before 23.7.1; before 23.q3; before 23.7.1; before 23.q3 |
| CVE-2023-20567 | 6.7 | Nov 14 | Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating… Affected: before 23.7.1; before 23.q3; before 23.7.1; before 23.q3 |
| CVE-2023-20510 | 6.0 | Aug 13 | An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of… Affected: before 23.12.1; through 23.q4 |
| CVE-2021-26367 | 6.0 | Aug 13 | A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to… Affected: before 23.12.1; through 23.q4 |
| CVE-2021-46748 | 5.5 | Nov 14 | Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application)… Affected: before 23.7.1; before 23.q3; before 23.7.1; before 23.q3 |
| CVE-2021-26393 | 5.5 | Nov 9 | Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA… Affected: before 22.5.2 |
| CVE-2021-26361 | 5.5 | May 12 | A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader… Affected: All versions, or not specified |
| CVE-2020-12960 | 5.5 | Nov 15 | AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of service (DoS) Affected: before 21.4.1 |
| CVE-2020-12905 | 5.5 | Nov 15 | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure Affected: before 20.11.2 |
| CVE-2020-12901 | 5.5 | Nov 15 | Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure Affected: before 20.7.1 |
| CVE-2020-12920 | 5.5 | Nov 15 | A potential denial of service issue exists in the AMD Display driver Escape 0x130007 Call handler Affected: before 20.11.2 |
| CVE-2020-12904 | 5.5 | Nov 15 | Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosure Affected: before 20.11.2 |
| CVE-2020-12897 | 5.5 | Nov 15 | Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass Affected: before 21.3.1 |
| CVE-2020-12987 | 5.5 | Jun 11 | A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass Affected: before 20.7.1 |
| CVE-2023-31307 | 4.4 | Aug 13 | Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a… Affected: before 23.12.1; through 23.q4 |
| CVE-2021-26363 | 4.4 | May 12 | A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data… Affected: All versions, or not specified |
Showing 16
