Access Control Flaw in AMD Software Products
CVE-2023-20508

5MEDIUM

Key Information:

Vendor

Amd
Status
Amd Radeon™ Rx 6000 Series Graphics Products
Amd Radeon™ Pro W6000 Series Graphics Products
Amd Radeon™ Instinct™ Mi25
Amd Radeon™ Pro V520
Vendor
CVE Published:
12 February 2025

What is CVE-2023-20508?

An improper access control vulnerability in AMD Software could enable a privileged attacker to execute an out-of-bounds write operation to a memory segment that is not under their control. This flaw raises significant security concerns, potentially allowing unauthorized access to confidential information and compromising the integrity and availability of the affected system.

Affected Version(s)

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.