Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Radeon ausnutzen, um Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.
Product
Radeon bezeichnet eine Familie von Grafikkarten von AMD.
Vulnerabilities 10
-
Medium 6.8
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workloa…
-
Medium 5.7
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an …
-
Medium 5.2
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid D…
-
Medium 5.0
Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed…
-
Medium 4.7
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to…
-
Low 3.3
An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtu…
-
Low 2.3
Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to …
-
Low 2.3
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-…
-
Low 1.9
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in int…
-
Low 1.9
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker…
Revision history
-
#4
Neue Updates von HP aufgenommen
-
#3
Neue Updates von European Union Vulnerability Database und Dell aufgenommen
-
#2
Neue Updates von LENOVO aufgenommen
-
#1
Initiale Fassung
References
-
AMD Security Bulletin vom 2024-08-13
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
-
Dell Security Advisory DSA-2024-249 vom 2024-08-13
https://www.dell.com/support/kbdoc/de-de/000225654/dsa-2024-249
-
HP Security Bulletin HPSBHF03965 vom 2024-08-08
https://support.hp.com/us-en/document/ish_11029588-11029592-16/HPSBHF03965
-
Lenovo Security Advisory LEN-164067 vom 2024-08-14
https://support.lenovo.com/us/en/product_security/LEN-164067
-
Lenovo Security Advisory LEN-212210 vom 2026-05-13
https://support.lenovo.com/us/en/product_security/LEN-212210
-
Dell Security Advisory DSA-2026-071 vom 2026-05-14
https://www.dell.com/support/kbdoc/000422878
-
HP Security Bulletin HPSBHF04121 vom 2026-05-15
https://support.hp.com/us-en/document/ish_14934878-14934908-16/HPSBHF04121