CVE-2023-20514: AMD Radeon™ RX 6000 Series Graphics Products

Описание

Оригинално описание

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution

Засегнати продукти

• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ RX 7000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W7000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO VII: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ VII: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ PRO V620: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PROV710: Contact your AMD Customer Engineering representative

Вид слабост

• CWE-233 Неправилна обработка на параметри

История

Други уязвимости в AMD AMD Radeon™ RX 6000 Series Graphics Products

• 6.9CVE-2026-43603
• 7.1CVE-2021-46747
• 2.0CVE-2025-52532
• 8.8CVE-2024-36323
• 7.0CVE-2024-36333

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-20514
• https://nvd.nist.gov/vuln/detail/CVE-2023-20514
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html
• https://www.amd.com/en/resources/product-security/bulletin/Emb-Auto.html