Summary
Ein Angreifer kann mehrere Schwachstellen in AMD Chipsätzen wie Radeon und Ryzen ausnutzen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
Product
Radeon bezeichnet eine Familie von Grafikkarten von AMD.
Vulnerabilities 21
-
High 8.8
Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow a…
-
High 8.8
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to per…
-
High 8.5
Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via re…
-
High 7.3
Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious t…
-
High 7.1
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user s…
-
High 7.1
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure …
-
High 7.0
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potent…
-
High 7.0
Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the inst…
-
Medium 6.8
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workloa…
-
Medium 6.8
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) t…
-
Medium 5.3
Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow …
-
Medium 5.3
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an in…
-
Medium 4.8
An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially …
-
Medium 4.6
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a mal…
-
Medium 4.6
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Vir…
-
Low 2.0
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the glob…
-
Low 1.8
A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside t…
-
Low 1.8
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly cr…
-
Low 1.8
An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of mem…
-
Low 1.8
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV…
-
Low 1.8
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV…
Revision history
-
#3
Neue Updates von HP aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2021-34843
-
#1
Initiale Fassung
References
-
AMD Security Bulletin amd-sb-6027 vom 2026-05-27
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html
-
HP Security Bulletin HPSBHF04127 vom 2026-06-12
https://support.hp.com/de-de/document/ish_15142748-15143245-16/HPSBHF04127