AMD AMD Radeonâ„¢ RX 6000 Series Graphics Products
En bref
- Source
- NVD
- EPSS
- EPSS 0.11 % · centile 1 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Awaiting Analysis
Description
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.
Faiblesses (CWE)
- CWE-129 — Validation incorrecte d'un indice de tableau
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 4.0 | MEDIUM 6.8 | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N | AMD |
| CVSS 4.0 | MEDIUM 6.8 | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · psirt@amd.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2023-35620
- GCVE · GCVE-0-2023-31309
Produits affectés
| Produit | Versions |
|---|---|
| AMD · AMD Radeon™ RX 6000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01) |
| AMD · AMD Radeon™ PRO W6000 Series Graphics Products | unaffected AMD Software: PRO Edition 23.Q4 |
| AMD · AMD Radeon™ PRO V520 | unaffected Contact your AMD Customer Engineering representative |
| AMD · AMD Radeon™ PRO V620 | unaffected Contact your AMD Customer Engineering representative |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |