AMD Radeon™ RX 7000 Series Graphics Products vulnerabilities
12 known vulnerabilities in AMD Radeon™ RX 7000 Series Graphics Products from AMD. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
AMD Radeon™ RX 7000 Series Graphics Products: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arbitrary code execution.
- 7.8 High severity
AMD Radeon™ RX 5000 Series Graphics Products: Uncontrolled Search Path Element
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 8.8 High severity
AMD Radeon™ RX 7000 Series Graphics Products: Improper Access Control
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write acces
- 8.8 High severity
AMD Radeon™ RX 6000 Series Graphics Products: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.
- 7.1 High severity
AMD Ryzen™ 5000 Series Mobile Processors with…: Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the
- 7.8 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Uncontrolled Search Path Element
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
- 8.8 High severity
AMD Ryzen™ 6000 Series Processors with Radeon™…: Out-of-bounds Write
Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
- 7.0 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Integer Overflow or Wraparound
Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability
- 8.7 High severity
AMD Radeon™ RX 6000 Series Graphics Products: Improper Handling of Parameters
Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution
- 8.4 High severity
AMD Ryzen™ 4000 Series Mobile Processors with…: Untrusted Pointer Dereference
Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service.
- 7.2 High severity
AMD Ryzen™ 8000 Series Desktop Processors: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity.
- 8.7 High severity
AMD Radeon™ RX 7000 Series Graphics Products: Access of Resource Using Incompatible Type
Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially leading to a read or write to shared memory resulting in loss of confidentiality, integ