CVE-2023-20567

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@amd.com

Published

2023-11-14

Last modified

2025-02-13

Weaknesses

CWE-347

Affected products

• Radeon Pro Vega 56 Firmware (Amd)
• Radeon Pro Vega 64 Firmware (Amd)
• Radeon Pro W5000w6000w7000 Series Graphics Cards (Amd)
• Radeon Pro Wx Vega Series Graphics Cards (Amd)
• Radeon Rx 500060007000 Series Graphics Cards (Amd)
• Radeon Rx Vega 56 Firmware (Amd)
• Radeon Rx Vega 64 Firmware (Amd)
• Radeon Rx Vega Series Graphics Cards (Amd)
• Radeon Software (Amd)
• Radeon Rx Vega M Firmware (Intel)

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html