Amd Radeon Rx Vega 56 vulnerabilities
8 vulnerabilities
Known vulnerabilities in Amd Radeon Rx Vega 56, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26392amdamd_3015ce_firmware+110
EPSS score0.28%
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.CVE-2021-26393amdamd_3015ce_firmware+72EPSS score0.27%
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.CVE-2021-26391amdamd radeon rx 5000 series & pro w5000 series+27EPSS score0.18%
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.CVE-2021-46748amdradeon_pro_vega_56_firmware+9EPSS score0.21%
Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.CVE-2020-12930amdamd_3015ce_firmware+108EPSS score0.27%
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.CVE-2023-20567amdradeon_pro_vega_56_firmware+9EPSS score0.16%
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.CVE-2023-20568amdradeon_pro_vega_56_firmware+9EPSS score0.16%
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.CVE-2023-31320amdradeon_pro_vega_56_firmware+8EPSS score1.27%
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.