5

CVE-2023-20508

Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorAMD
Product AMD Radeon™ RX 6000 Series Graphics Products
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Radeon™ PRO W6000 Series Graphics Products
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Radeon™ Instinct™ MI25
Default Statusunknown
Version Contact your AMD Customer Engineering representative
Status unknown
VendorAMD
Product AMD Radeon™ PRO V520
Default Statusunknown
Version Contact your AMD Customer Engineering representative
Status unknown
VendorAMD
Product AMD Radeon™ PRO V620
Default Statusunknown
Version Contact your AMD Customer Engineering representative
Status unknown
VendorAMD
Product AMD Radeon™ PRO V710
Default Statusunknown
Version Contact your AMD Customer Engineering representative
Status unknown
VendorAMD
Product AMD Instinct™ MI300A
Default Statusaffected
Version MI300PI 1.0.0.5
Status unaffected
VendorAMD
Product AMD Instinct™ MI300X
Default Statusaffected
Version BKC 24.12
Status unaffected
VendorAMD
Product AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 5000 Series Desktop Processors
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 7030 Series Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 7000 Series Desktop Processors
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
VendorAMD
Product AMD Ryzen™ 7045 Series Mobile Processors
Default Statusaffected
Version AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
Status unaffected
Version AMD Software: PRO Edition 24.Q2 (24.10.20)
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.062
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
psirt@amd.com 5 0.8 3.7
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
CWE-1284 Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.