CVE-2023-20548
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - psirt@amd.com
- Published
- 2026-02-11
- Last modified
- 2026-02-11
- Weaknesses
- CWE-367
Affected products
- Amd Instinct Mi210 (Amd)
- Amd Instinct Mi250 (Amd)
- Amd Instinct Mi300a (Amd)
- Amd Instinct Mi300x (Amd)
- Amd Radeon Pro Vii (Amd)
- Amd Radeon Pro W5000 Series Graphics Products (Amd)
- Amd Radeon Rx 5000 Series Graphics Products (Amd)
- Amd Radeon Vii (Amd)
- Radeon Pro Vii Firmware (Amd)
- Radeon Software (Amd)
- Radeon Vii Firmware (Amd)
- Rocm (Amd)
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html
