CVE-2023-20598

Published: Oct 17, 2023

Modified: Aug 2, 2024

PUBLISHED

Description

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Vendor	Product	Versions
AMD	Radeon™ RX 5000 Series Graphics Cards	affected `various`
AMD	Radeon™ RX 6000 Series Graphics Cards	affected `various`
AMD	Radeon™ RX 7000 Series Graphics Cards	affected `various`
AMD	Radeon™ PRO W5000 Series Graphics Cards	affected `Various`
AMD	Radeon™ PRO W6000 Series Graphics Cards	affected `various`
AMD	Radeon™ PRO W7000 Series Graphics Cards	affected `various`
AMD	Ryzen™ 7045 Series Processors with Radeon™ Graphics	affected `various`
AMD	Ryzen™ 7020 Series Processors with Radeon™ Graphics	affected `various`
AMD	Ryzen™ 7040 Series Processors with Radeon™ Graphics	affected `various`
AMD	Ryzen™ 7000 Series Processors with Radeon™ Graphics	affected `various`
AMD	Ryzen™ 6000 Series Processors with Radeon™ Graphics	affected `various`
AMD	Ryzen™ 7035 Series Processors with Radeon™ Graphics	affected `various`

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-20598

Description

Affected Products

References