AMD AMD Radeon™ VII
11 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-36333 | | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in ar | HIGH 7.0 | 0.1 % | ||
| CVE-2022-23826 | | A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race conditi | LOW 1.8 | 0.1 % | ||
| CVE-2021-26380 | | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range re | LOW 1.8 | 0.1 % | ||
| CVE-2023-31323 | No fix planned | Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Intercon | HIGH 8.4 | 0.2 % | ||
| CVE-2023-20601 | | Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially resulting in a denial- | MEDIUM 4.6 | 0.2 % | ||
| CVE-2023-20548 | | A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in | HIGH 7.1 | 0.1 % | ||
| CVE-2024-36320 | | Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidential | HIGH 7.0 | 0.2 % | ||
| CVE-2023-20514 | | Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to fun | HIGH 8.7 | 0.2 % | ||
| CVE-2025-0010 | | An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confiden | MEDIUM 6.1 | 0.1 % | ||
| CVE-2024-36352 | | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to a | HIGH 8.4 | 0.1 % | ||
| CVE-2024-21971 | | Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, r | MEDIUM 5.5 | 0.1 % |