Amd Radeon Software vulnerabilities, page 3
52 vulnerabilities
Known vulnerabilities in Amd Radeon Software, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-12900amdamd radeon software+1
EPSS score0.25%
An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileges and cause Denial of Service.CVE-2024-21937amdamd software: adrenalin edition+4EPSS score0.26%
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.CVE-2024-36333amdcleanup_utility+1EPSS score0.12%
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.CVE-2023-20510amdradeon_softwareEPSS score0.14%
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service.CVE-2023-20567amdradeon_pro_vega_56_firmware+9EPSS score0.16%
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.CVE-2023-20548amdradeon_pro_vii_firmware+3EPSS score0.11%
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.CVE-2023-20586amdradeon_software+1EPSS score1.00%
A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edition falls outside of the security support lifecycle and AMD does not plan to release any mitigationsCVE-2023-20598amdradeon_software+12EPSS score0.44%
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.CVE-2023-20568amdradeon_pro_vega_56_firmware+9EPSS score0.16%
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.CVE-2023-31320amdradeon_pro_vega_56_firmware+8EPSS score1.27%
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.CVE-2023-31324amdradeon_pro_vii_firmware+3EPSS score0.11%
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.CVE-2023-31307amdradeon_softwareEPSS score0.15%
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service.