Medium WID-SEC-2023-2898 4 CVEs

AMD Radeon und Prozessor: Mehrere Schwachstellen

Published Nov 14, 2023 · Updated Nov 20, 2023 · Revision 2 · de-DE

Vendor: AMD Vendor: HP Vendor: Lenovo Product: Computer Product: Computer Product: Prozessor Product: Radeon Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in AMD Prozessoren und AMD Radeon ausnutzen, um einen Denial of Service Zustand zu erzeugen oder beliebigen Code auszuführen.

Product

Prozessoren sind die zentralen Rechenwerke eines Computers.
Radeon bezeichnet eine Familie von Grafikkarten von AMD.

Vulnerabilities 4

Unscored —

CVE-2021-46748

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bound…

AMD Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards Radeon™ PRO WX Vega Series Graphics Cards Radeon™ RX 5000/6000/7000 Series Graphics Cards

Nov 14, 2023
Unscored —

CVE-2023-20567

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin priv…

AMD Radeon™ PRO WX Vega Series Graphics Cards Radeon™ RX 5000/6000/7000 Series Graphics Cards Radeon™ RX Vega Series Graphics Cards

Nov 14, 2023
Unscored —

CVE-2023-20568

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin priv…

AMD Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards Radeon™ PRO WX Vega Series Graphics Cards Radeon™ RX 5000/6000/7000 Series Graphics Cards

Nov 14, 2023
Unscored —

CVE-2023-31320 Public exploit

Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display pote…

AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards Radeon™ RX Vega Series Graphics Cards Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards

Nov 14, 2023

Revision history

2023-11-20 #2
Neue Updates von HP aufgenommen
2023-11-14 #1
Initiale Fassung

References

HP Security Bulletin HPSBHF03885 vom 2023-11-21
https://support.hp.com/us-en/document/ish_9677353-9677377-16/HPSBHF03885
Lenovo Security Advisory LEN-135397 vom 2023-11-15
https://support.lenovo.com/us/en/product_security/LEN-135397
AMD Security Bulletin vom 2023-11-14
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6003.html