Summary
Ein Angreifer kann mehrere Schwachstellen in AMD Radeon ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.
Product
Radeon bezeichnet eine Familie von Grafikkarten von AMD.
Vulnerabilities 15
-
High 8.8
Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potenti…
-
High 8.4
Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External G…
-
High 7.8
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation pot…
-
High 7.2
An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to se…
-
High 7.1
Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmappin…
-
High 7.1
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrup…
-
High 7.1
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify…
-
High 7.0
Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to…
-
Medium 6.9
Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resul…
-
Medium 6.3
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously c…
-
Medium 6.0
Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtua…
-
Medium 5.5
The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially…
-
Medium 5.5
drm/amdkfd: Fix NULL Pointer Dereference in KFD queue
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL Pointer Dereference in KFD queue Through KFD IOCTL Fuzzing we encountered a NULL pointer derefrence when calling kfd_queue_acquire_buffers. (cherry picked from commit 049…
-
Medium 4.6
Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially r…
-
Low 1.8
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter val…
Revision history
-
#3
Neue Updates von HP aufgenommen
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
AMD Graphics Driver Vulnerabilities – February 2026 vom 2026-02-10
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6024.html
-
Dell Security Advisory DSA-2025-329 vom 2026-02-11
https://www.dell.com/support/kbdoc/de-de/000359234/dsa-2025-329
-
Lenovo Security Advisory LEN-201021 vom 2026-02-10
https://support.lenovo.com/us/en/product_security/LEN-201021
-
Dell Security Advisory DSA-2026-090 vom 2026-02-11
https://www.dell.com/support/kbdoc/en-us/000426707/dsa-2026-090-security-update-for-dell-amd-based-graphics-driver-vulnerabilities
-
HP Security Bulletin HPSBHF04091 vom 2025-12-05
https://support.hp.com/de-de/document/ish_14068972-14069154-16/HPSBHF04091