CVEvulnerability
CVE-2023-20567
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-347
Description
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.
Affected configurations
• intel radeon rx vega m firmware (< 23.10.01.46)
• amd radeon software (< 23.7.1)
• amd radeon software (< 23.q3)
• amd radeon rx vega 56 firmware
• amd radeon rx vega 64 firmware
• amd radeon pro vega 56 firmware
• amd radeon pro vega 64 firmware
Related
Weakness · CWE (1)
- CWE-347 Improper Verification of Cryptographic Signature weakness
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html Vendor Advisory