VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 17, 2023· Updated Jun 17, 2026

CVE-2023-20598

CVE-2023-20598

Description

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Affected products

15
  • AMD/Radeon Software2 versions
    cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*+ 1 more
    • cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*range: <23.9.2
    • cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*range: <23.q4
  • AMD/Radeon Graphics Driverllm-fuzzy
  • AMD/Radeon™ PRO W5000 Series Graphics Cardsv5
    Range: Various
  • AMD/Radeon™ PRO W6000 Series Graphics Cardsv5
    Range: various
  • AMD/Radeon™ PRO W7000 Series Graphics Cardsv5
    Range: various
  • AMD/Radeon™ RX 5000 Series Graphics Cardsv5
    Range: various
  • AMD/Radeon™ RX 6000 Series Graphics Cardsv5
    Range: various
  • AMD/Radeon™ RX 7000 Series Graphics Cardsv5
    Range: various
  • AMD/Ryzen™ 6000 Series Processors with Radeon™ Graphicsv5
    Range: various
  • AMD/Ryzen™ 7000 Series Processors with Radeon™ Graphicsv5
    Range: various
  • AMD/Ryzen™ 7020 Series Processors with Radeon™ Graphicsv5
    Range: various
  • AMD/Ryzen™ 7035 Series Processors with Radeon™ Graphicsv5
    Range: various
  • AMD/Ryzen™ 7040 Series Processors with Radeon™ Graphicsv5
    Range: various
  • AMD/Ryzen™ 7045 Series Processors with Radeon™ Graphicsv5
    Range: various

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.