8.7
High
CVE-2023-31322 Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and…
Description
Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially leading to a read or write to shared memory resulting in loss of confidentiality, integrity, or availability.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:LExploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Changed
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon™ RX 7000 Series Graphics Products | Versions not published | |
| -AMD Radeon™ PRO W7000 Series Graphics Products | Versions not published |
Other CVEs of AMD Radeon™ RX 7000 Series Graphics Products
The 27 CVEs of AMD Radeon™ RX 7000 Series Graphics Products →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user…
7.1
High
CVE-2024-36323
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to…
8.8
High
CVE-2024-36333
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation…
7.0
High