8.4
High
CVE-2023-31323 Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External…
Description
Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon™ RX 5000 Series Graphics Products | Versions not published | |
| AMD Radeon™ PRO W5000 Series Graphics Products | Versions not published | |
| AMD Radeon™ VII | Versions not published | |
| AMD Radeon™ PRO VII | Versions not published | |
| AMD Instinct™ MI250 | Versions not published | |
| AMD Instinct™ MI300A | Versions not published | |
| AMD Instinct™ MI210 | Versions not published | |
| AMD Instinct™ MI300X | Versions not published |
Other CVEs of AMD Radeon™ RX 5000 Series Graphics Products
The 23 CVEs of AMD Radeon™ RX 5000 Series Graphics Products →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user…
7.1
High
CVE-2024-36333
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation…
7.0
High
CVE-2022-23826
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly…
1.8
Low