CVE-2023-20598

Alta7.8Pubblicata il 17 ottobre 2023

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Preallarme: sfruttamento osservato

  • Sfruttamento osservato dal 8 ott 2025
  • Non ancora nel catalogo ufficiale CISA
  • Primo attacco osservato 721 giorni dopo la divulgazione

Fonte: VulnCheck KEV · 24 set 2026 8 ott 2025

Punteggio CVSS7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Tipo di debolezza (CWE)CWE-269
Vendoramd

Prodotti coinvolti

VendorProdottoVersioni
amdradeon software< 23.9.2
amdradeon rx 5300-
amdradeon rx 5300 xt-
amdradeon rx 5300m-
amdradeon rx 5500-
amdradeon rx 5500 xt-
amdradeon rx 5500m-
amdradeon rx 5600-
amdradeon rx 5600 xt-
amdradeon rx 5600m-
amdradeon rx 5700-
amdradeon rx 5700 xt-
amdradeon rx 5700m-
amdradeon rx 6300m-
amdradeon rx 6400-
amdradeon rx 6450m-
amdradeon rx 6500 xt-
amdradeon rx 6500m-
amdradeon rx 6550m-
amdradeon rx 6550s-
amdradeon rx 6600-
amdradeon rx 6600 xt-
amdradeon rx 6600m-
amdradeon rx 6600s-
amdradeon rx 6650 xt-

Articoli correlati

This product uses the NVD API but is not endorsed or certified by the NVD.

Database CVE