Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-20548

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 5000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ PRO W5000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ VII

Default version status: affected

  • No fix plannedunaffected

AMD AMD Radeon™ PRO VII

Default version status: affected

  • No fix plannedunaffected

AMD AMD Instinct™ MI210

Default version status: affected

  • ROCm 6.2unaffected

AMD AMD Instinct™ MI250

Default version status: affected

  • ROCm 6.2unaffected

AMD AMD Instinct™ MI300X

Default version status: affected

  • ROCm 6.2unaffected

AMD AMD Instinct™ MI300A

Default version status: affected

  • ROCm 6.2unaffected

References