5.2
Medium
CVE-2023-20509 An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid…
Description
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon™ RX 6000 Series Graphics Cards | Versions not published | |
| AMD Radeon™ PRO W6000 Series Graphics Cards | Versions not published | |
| AMD Radeon™ RX 7000 Series Graphics Cards | Versions not published | |
| AMD Radeon™ PRO W7000 Series Graphics Cards | Versions not published |
Other CVEs of AMD Radeon™ RX 6000 Series Graphics Cards
The 9 CVEs of AMD Radeon™ RX 6000 Series Graphics Cards →
CVE-2023-31310
Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a…
5.0
Medium
CVE-2023-31307
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an…
2.3
Low
CVE-2023-31304
Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) …
2.3
Low
CVE-2023-31305
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an…
1.9
Low