Skip to content
Sign in
5.0 Medium

CVE-2023-20508 Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory…

Description

Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability.

Affected products and versions

Product Affected versions Fixed in
AMD Radeon™ RX 6000 Series Graphics Products Versions not published
AMD Radeon™ PRO W6000 Series Graphics Products Versions not published
AMD Radeon™ Instinct™ MI25 Versions not published
AMD Radeon™ PRO V520 Versions not published
AMD Radeon™ PRO V620 Versions not published
AMD Radeon™ PRO V710 Versions not published
AMD Instinct™ MI300A Versions not published
AMD Instinct™ MI300X Versions not published
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Versions not published
Show the 16 other branches
Product Affected versions Fixed in
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Desktop Processors Versions not published
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7030 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7000 Series Desktop Processors Versions not published
AMD Ryzen™ 7045 Series Mobile Processors Versions not published

Other CVEs of AMD Radeon™ RX 6000 Series Graphics Products

The 28 CVEs of AMD Radeon™ RX 6000 Series Graphics Products →
CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… 6.9 Medium CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 High CVE-2024-36333 A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation… 7.0 High CVE-2023-31309 Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload… 6.8 Medium
Track this CVE