Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Radeon ausnutzen, um sich erhöhte Privilegien zu verschaffen, beliebigen Code auszuführen, einen Denial of Service-Zustand herbeizuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder nicht näher spezifizierte Angriffe durchzuführen.
Product
Radeon bezeichnet eine Familie von Grafikkarten von AMD.
Vulnerabilities 19
-
High 8.8
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in…
-
High 8.7
Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Se…
-
High 8.4
Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, pot…
-
High 7.9
Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised user…
-
High 7.2
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the content…
-
Medium 6.4
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double …
-
Medium 6.1
An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resultin…
-
Medium 6.0
Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to se…
-
Medium 6.0
Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtua…
-
Medium 5.5
A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potential…
-
Medium 4.7
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV…
-
Medium 4.1
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious user…
-
Low 3.9
An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the rese…
-
Low 3.3
Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Re…
-
Low 3.3
Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arg…
-
Low 3.3
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out…
-
Low 3.3
Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to o…
-
Low 3.0
Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to s…
-
Low 2.8
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution en…
Revision history
-
#6
Referenz(en) aufgenommen: EUVD-2023-60609, EUVD-2023-60610
-
#5
Neue Updates von HP aufgenommen
-
#4
Neue Updates von HP aufgenommen
-
#3
Referenz(en) aufgenommen: EUVD-2024-54972, EUVD-2023-35637, EUVD-2023-35676, EUVD-2023-35636, EUVD-2023-35633, EUVD-2021-33406, EUVD-2024-54970, EUVD-2024-54971, EUVD-2025-27085
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
AMD Security Bulletin AMD-SB-6018 vom 2025-08-12
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6018.html
-
Dell Security Advisory DSA-2025-231 vom 2025-08-12
https://www.dell.com/support/kbdoc/de-de/000328052/dsa-2025-231
-
Lenovo Security Advisory LEN-196649 vom 2025-08-13
https://support.lenovo.com/us/en/product_security/LEN-196649
-
Dell Security Advisory DSA-2025-322 vom 2025-08-14
https://www.dell.com/support/kbdoc/000356336
-
HP Security Bulletin HPSBHF04059 vom 2025-09-15
https://support.hp.com/de-de/document/ish_13045735-13045757-16/HPSBHF04059
-
HP Security Bulletin HPSBHF04073 vom 2025-10-09
https://support.hp.com/us-en/document/ish_13188050-13188072-16/HPSBHF04073