Amd Radeon Software vulnerabilities

CVE-2020-12983 [HIGH] CWE-787 CVE-2020-12983: An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalatio An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or denial of service.

CVE-2020-12898 [HIGH] CWE-787 CVE-2020-12898: Stack Buffer Overflow in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or d Stack Buffer Overflow in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.

CVE-2020-12893 [HIGH] CWE-787 CVE-2020-12893: Stack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to escalatio Stack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to escalation of privilege or denial of service.

CVE-2020-12903 [HIGH] CWE-787 CVE-2020-12903: Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to e Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to escalation of privilege or denial of service.

CVE-2020-12895 [HIGH] CWE-787 CVE-2020-12895: Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation o Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of service.

CVE-2020-12900 [HIGH] CVE-2020-12900: An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileges and cause Denial of Service.

CVE-2020-12985 [HIGH] CWE-20 CVE-2020-12985: An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.

CVE-2020-12982 [HIGH] CWE-763 CVE-2020-12982: An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to e An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.

CVE-2020-12891 [HIGH] CWE-427 CVE-2020-12891: AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user m AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.

CVE-2020-12894 [HIGH] CWE-787 CVE-2020-12894: Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service.

CVE-2023-20568 [MEDIUM] CWE-347 CVE-2023-20568: Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attac Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

CVE-2023-20567 [MEDIUM] CWE-347 CVE-2023-20567: Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attac Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

CVE-2020-12899 [HIGH] CVE-2020-12899: Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service. Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service.

CVE-2021-26367 [MEDIUM] CVE-2021-26367: A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.

CVE-2020-12901 [MEDIUM] CWE-416 CVE-2020-12901: Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or informati Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure.

CVE-2020-12905 [MEDIUM] CWE-125 CVE-2020-12905: Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary i Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004403 may lead to arbitrary information disclosure.

CVE-2021-26393 [MEDIUM] CWE-401 CVE-2021-26393: Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) ma Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.

CVE-2020-12904 [MEDIUM] CWE-125 CVE-2020-12904: Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary i Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosure.

CVE-2023-20510 [MEDIUM] CVE-2023-20510: An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an inva An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service.

CVE-2020-12987 [MEDIUM] CWE-200 CVE-2020-12987: A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.