Improper Signature Verification in Radeon Graphics Driver by AMD

CVE-2023-20567

Summary

The Radeon RX Vega M Graphics driver for Windows contains an improper signature verification flaw that may permit an attacker with administrative privileges to execute the AMDSoftwareInstaller.exe file without proper file signature validation, potentially leading to arbitrary code execution. This vulnerability poses a significant risk as it allows malicious actors to exploit the system, particularly in environments where users may have elevated permissions.

References