CVE-2023-20514highCWE-233

CVE-2023-20514: high-severity vulnerability in AMD Radeon™ PRO V620

Published · Updated

Follow this CVE+ Monitor AMD Radeon™ PRO W6000 Series Graphics Products+ Monitor AMD Radeon™ RX 6000 Series Graphics Products

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.2%
Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
AMD · AMD Radeon™ PRO V620AMD · AMD Radeon™ PROV710AMD · AMD Radeon™ PRO VIIAMD · AMD Radeon™ PRO W6000 Series Graphics ProductsAMD · AMD Radeon™ PRO W7000 Series Graphics ProductsAMD · AMD Radeon™ RX 6000 Series Graphics ProductsAMD · AMD Radeon™ RX 7000 Series Graphics ProductsAMD · AMD Radeon™ VII
Related CVEs — AMD Radeon™ PRO V620

In the same product, most dangerous first.

CVE-2023-20601MEDIUMCVE-2023-20601EPSS 0.2%CVE-2024-36324HIGHCVE-2024-36324EPSS 0.2%CVE-2024-36342HIGHCVE-2024-36342EPSS 0.2%CVE-2024-36316MEDIUMCVE-2024-36316EPSS 0.2%CVE-2021-26410LOWCVE-2021-26410EPSS 0.2%CVE-2021-26381HIGHCVE-2021-26381EPSS 0.2%