CVE Feed

    Dashboard / CVE / CVE-2023-20598

    CVE-2023-20598

    An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

    Published:Oct 16, 2023
    Last Modified:Nov 21, 2024
    EPS:Oct 17, 2023
    EPSS Score:0.01465
    CVSS Score:7.8

    Affected Products

    Vendor
    Amd
    Product
    Radeon Pro W5500
    Vendor
    Amd
    Product
    Radeon Pro W5700
    Vendor
    Amd
    Product
    Radeon Pro W6300
    Vendor
    Amd
    Product
    Radeon Pro W6400
    Vendor
    Amd
    Product
    Radeon Pro W6600
    Vendor
    Amd
    Product
    Radeon Pro W6800
    Vendor
    Amd
    Product
    Radeon Pro W7500
    Vendor
    Amd
    Product
    Radeon Pro W7600
    Vendor
    Amd
    Product
    Radeon Pro W7800
    Vendor
    Amd
    Product
    Radeon Pro W7900
    Vendor
    Amd
    Product
    Radeon Rx 5300
    Vendor
    Amd
    Product
    Radeon Rx 5300 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5300m
    Vendor
    Amd
    Product
    Radeon Rx 5500
    Vendor
    Amd
    Product
    Radeon Rx 5500 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5500m
    Vendor
    Amd
    Product
    Radeon Rx 5600
    Vendor
    Amd
    Product
    Radeon Rx 5600 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5600m
    Vendor
    Amd
    Product
    Radeon Rx 5700
    Vendor
    Amd
    Product
    Radeon Rx 5700 Xt
    Vendor
    Amd
    Product
    Radeon Rx 5700m
    Vendor
    Amd
    Product
    Radeon Rx 6300m
    Vendor
    Amd
    Product
    Radeon Rx 6400
    Vendor
    Amd
    Product
    Radeon Rx 6450m
    Vendor
    Amd
    Product
    Radeon Rx 6500 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6500m
    Vendor
    Amd
    Product
    Radeon Rx 6550m
    Vendor
    Amd
    Product
    Radeon Rx 6550s
    Vendor
    Amd
    Product
    Radeon Rx 6600
    Vendor
    Amd
    Product
    Radeon Rx 6600 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6600m
    Vendor
    Amd
    Product
    Radeon Rx 6600s
    Vendor
    Amd
    Product
    Radeon Rx 6650 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6650m
    Vendor
    Amd
    Product
    Radeon Rx 6650m Xt
    Vendor
    Amd
    Product
    Radeon Rx 6700
    Vendor
    Amd
    Product
    Radeon Rx 6700 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6700m
    Vendor
    Amd
    Product
    Radeon Rx 6700s
    Vendor
    Amd
    Product
    Radeon Rx 6750 Gre 10gb
    Vendor
    Amd
    Product
    Radeon Rx 6750 Gre 12gb
    Vendor
    Amd
    Product
    Radeon Rx 6750 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6800
    Vendor
    Amd
    Product
    Radeon Rx 6800 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6800s
    Vendor
    Amd
    Product
    Radeon Rx 6900 Xt
    Vendor
    Amd
    Product
    Radeon Rx 6950 Xt
    Vendor
    Amd
    Product
    Radeon Rx 7600
    Vendor
    Amd
    Product
    Radeon Rx 7600m
    Vendor
    Amd
    Product
    Radeon Rx 7600m Xt
    Vendor
    Amd
    Product
    Radeon Rx 7600s
    Vendor
    Amd
    Product
    Radeon Rx 7700 Xt
    Vendor
    Amd
    Product
    Radeon Rx 7700s
    Vendor
    Amd
    Product
    Radeon Rx 7800 Xt
    Vendor
    Amd
    Product
    Radeon Rx 7900 Gre
    Vendor
    Amd
    Product
    Radeon Rx 7900 Xt
    Vendor
    Amd
    Product
    Radeon Rx 7900 Xtx
    Vendor
    Amd
    Product
    Radeon Rx 7900m
    Vendor
    Amd
    Product
    Radeon Software
    Vendor
    Amd
    Product
    Ryzen 3 7320u
    Vendor
    Amd
    Product
    Ryzen 3 7335u
    Vendor
    Amd
    Product
    Ryzen 3 7440u
    Vendor
    Amd
    Product
    Ryzen 5 6600h
    Vendor
    Amd
    Product
    Ryzen 5 6600hs
    Vendor
    Amd
    Product
    Ryzen 5 6600u
    Vendor
    Amd
    Product
    Ryzen 5 7500f
    Vendor
    Amd
    Product
    Ryzen 5 7520u
    Vendor
    Amd
    Product
    Ryzen 5 7535hs
    Vendor
    Amd
    Product
    Ryzen 5 7535u
    Vendor
    Amd
    Product
    Ryzen 5 7540u
    Vendor
    Amd
    Product
    Ryzen 5 7600
    Vendor
    Amd
    Product
    Ryzen 5 7600x
    Vendor
    Amd
    Product
    Ryzen 5 7640h
    Vendor
    Amd
    Product
    Ryzen 5 7640u
    Vendor
    Amd
    Product
    Ryzen 5 7645hx
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7640hs
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7645
    Vendor
    Amd
    Product
    Ryzen 7 6800h
    Vendor
    Amd
    Product
    Ryzen 7 6800hs
    Vendor
    Amd
    Product
    Ryzen 7 6800u
    Vendor
    Amd
    Product
    Ryzen 7 7700
    Vendor
    Amd
    Product
    Ryzen 7 7700x
    Vendor
    Amd
    Product
    Ryzen 7 7735hs
    Vendor
    Amd
    Product
    Ryzen 7 7735u
    Vendor
    Amd
    Product
    Ryzen 7 7736u
    Vendor
    Amd
    Product
    Ryzen 7 7745hx
    Vendor
    Amd
    Product
    Ryzen 7 7800x3d
    Vendor
    Amd
    Product
    Ryzen 7 7840h
    Vendor
    Amd
    Product
    Ryzen 7 7840u
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7745
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7840hs
    Vendor
    Amd
    Product
    Ryzen 9 6900hs
    Vendor
    Amd
    Product
    Ryzen 9 6900hx
    Vendor
    Amd
    Product
    Ryzen 9 6980hs
    Vendor
    Amd
    Product
    Ryzen 9 6980hx
    Vendor
    Amd
    Product
    Ryzen 9 7845hx
    Vendor
    Amd
    Product
    Ryzen 9 7900
    Vendor
    Amd
    Product
    Ryzen 9 7900x
    Vendor
    Amd
    Product
    Ryzen 9 7900x3d
    Vendor
    Amd
    Product
    Ryzen 9 7940h
    Vendor
    Amd
    Product
    Ryzen 9 7945hx
    Vendor
    Amd
    Product
    Ryzen 9 7945hx3d
    Vendor
    Amd
    Product
    Ryzen 9 7950x
    Vendor
    Amd
    Product
    Ryzen 9 7950x3d
    Vendor
    Amd
    Product
    Ryzen 9 Pro 7940hs
    Vendor
    Amd
    Product
    Ryzen 9 Pro 7945

    Exploits

    https://github.com/H4rk3nz0/CVE-2023-20598-PDFWKRNL

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2024-36333 (CVSS 7) — A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalati…
    CVE-2023-20548 (CVSS 7.1) — A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker …
    CVE-2023-31324 (CVSS 7.1) — A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker …
    CVE-2023-31320 (CVSS 7.5) — Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the dis…
    CVE-2023-20568 (CVSS 6.7) — Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with a…
    CVE-2023-20567 (CVSS 6.7) — Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with a…
    CVE-2021-46748 (CVSS 5.5) — Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside …
    CVE-2020-12930 (CVSS 7.8) — Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate …
    CVE-2021-26393 (CVSS 5.5) — Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an…
    CVE-2021-26392 (CVSS 7.8) — Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High