Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2023-20514

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environm

Description

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 6000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ PRO W6000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ RX 7000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ PRO W7000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ PRO VII

Default version status: affected

  • AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)unaffected

AMD AMD Radeon™ VII

Default version status: affected

  • AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA), AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)unaffected

AMD AMD Radeon™ PRO V620

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

AMD AMD Radeon™ PROV710

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

References