Advisories · Technology
AMD Radeon™ RX 7000 Series Graphics Products.
Every CVE that names AMD Radeon™ RX 7000 Series Graphics Products among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Improper access control in AMD Radeon™ RX 7000 Series Graphics Products and others
- AMD Radeon™ RX 7000 Series Graphics Products
- AMD Radeon™ PRO W7000 Series Graphics Products
- Broken access control
- CVSS 7.0 High
Uncontrolled search path in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ PRO W5000 Series Graphics Products
- CWE-427
- CVSS 7.0 High
Improper signature verification in AMD Radeon™ RX 7000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- Weak cryptography or TLS
- CVSS 4.8 Medium
Out-of-bounds read in AMD Ryzen™ Al Max+ and others
- AMD Ryzen™ Al Max+
- AMD Ryzen™ AI 300 Series Processors
- Memory corruption
- CVSS 8.8 High
Buffer overflow in AMD Radeon™ RX 6000 Series Graphics Products and others
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- Memory corruption
- CVSS 1.8 Low
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- CWE-1284
- CVSS 4.6 Medium
Out-of-bounds read in AMD Radeon™ RX 6000 Series Graphics Products and others
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ RX 7000 Series Graphics Products
- Memory corruption
- CVSS 7.1 High
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the tr…
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Desktop Processors
- CWE-1304
- CVSS 6.3 Medium
Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potential…
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics; AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI MAX Series Processors
- CWE-1191
- CVSS 6.9 Medium
Out-of-bounds write in AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ AI 300 Series Processors
- Memory corruption
- CVSS 8.7 High
Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in ar…
- AMD Radeon™ RX 6000 Series Graphics Products
- AMD Radeon™ PRO W6000 Series Graphics Products
- CWE-233
- CVSS 8.8 High
Out-of-bounds write in AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics… and others
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 5.5 Medium
Integer overflow in AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics… and others
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics; AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.8 High
Uncontrolled search path in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly… and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")
- CWE-427
- CVSS 3.3 Low
Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentialit…
- AMD Ryzen™ 8000 Series Desktop Processors
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- CWE-212
- CVSS 6.1 Medium
Out-of-bounds write in AMD Radeon™ RX 5000 Series Graphics Products and others
- AMD Radeon™ RX 5000 Series Graphics Products
- AMD Radeon™ RX 6000 Series Graphics Products
- Memory corruption
- CVSS 8.4 High
Untrusted pointer dereference in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- Memory corruption
- CVSS 3.9 Low
Integer overflow in AMD Radeon™ RX 7000 Series Graphics Products and others
- AMD Radeon™ RX 7000 Series Graphics Products
- AMD Radeon™ PRO W7000 Series Graphics Products
- Memory corruption
- CVSS 2.8 Low
Use of uninitialized variable in AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics and others
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics
- Memory corruption
- CVSS 7.2 High
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiali…
- AMD Ryzen™ 8000 Series Desktop Processors
- AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
- CWE-1189
- CVSS 8.7 High
Type confusion in AMD Radeon™ RX 7000 Series Graphics Products and others
- AMD Radeon™ RX 7000 Series Graphics Products
- -AMD Radeon™ PRO W7000 Series Graphics Products
- Memory corruption
- CVSS 5.5 Medium
Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading…
- AMD Ryzen™ 5000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- CWE-1220