Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-20598

CVE-2023-20598

Description

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Radeon™ RX 5000 Series Graphics Cards

Default version status: affected

  • variousaffected

AMD Radeon™ RX 6000 Series Graphics Cards

Default version status: affected

  • various affected

AMD Radeon™ RX 7000 Series Graphics Cards

Default version status: affected

  • various affected

AMD Radeon™ PRO W5000 Series Graphics Cards

Default version status: affected

  • Various affected

AMD Radeon™ PRO W6000 Series Graphics Cards

Default version status: affected

  • various affected

AMD Radeon™ PRO W7000 Series Graphics Cards

Default version status: affected

  • variousaffected

AMD Ryzen™ 7045 Series Processors with Radeon™ Graphics

Default version status: affected

  • various affected

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • various affected

AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics

Default version status: affected

  • various affected

AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics

Default version status: affected

  • various affected

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • various affected

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Default version status: affected

  • various affected

References