8.7
High
CVE-2023-20514 Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary…
Description
Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon™ RX 6000 Series Graphics Products | Versions not published | |
| AMD Radeon™ PRO W6000 Series Graphics Products | Versions not published | |
| AMD Radeon™ RX 7000 Series Graphics Products | Versions not published | |
| AMD Radeon™ PRO W7000 Series Graphics Products | Versions not published | |
| AMD Radeon™ PRO VII | Versions not published | |
| AMD Radeon™ VII | Versions not published | |
| AMD Radeon™ PRO V620 | Versions not published | |
| AMD Radeon™ PROV710 | Versions not published |
Other CVEs of AMD Radeon™ RX 6000 Series Graphics Products
The 28 CVEs of AMD Radeon™ RX 6000 Series Graphics Products →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user…
7.1
High
CVE-2024-36333
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation…
7.0
High
CVE-2023-31309
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload…
6.8
Medium