Amd Radeon Rx 7000 Series Graphics Products (Amd) - vulnerabilities (CVEs)

26 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-01. Vendor: Amd.

CVEs of Amd Radeon Rx 7000 Series Graphics Products

• CVE-2021-46747 - CVSS 7.1 (high), 2026-06-01: Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN…
• CVE-2024-36334 - CVSS 7 (high), 2026-05-15: Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with…
• CVE-2024-36333 - CVSS 7.8 (high), 2026-05-15: A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code…
• CVE-2024-36323 - CVSS 8.8 (high), 2026-05-15: Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the…
• CVE-2025-66664 - CVSS 4.6 (medium), 2026-05-15: Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW…
• CVE-2025-66660 - CVSS 1.8 (low), 2026-05-15: Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect…
• CVE-2025-0044 - CVSS 4.8 (medium), 2026-05-15: An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of…
• CVE-2023-31317 - CVSS 8.8 (high), 2026-05-15: Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to…
• CVE-2023-31316 - CVSS 7.1 (high), 2026-05-15: Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker…
• CVE-2024-36319 - CVSS 6.3 (medium), 2026-02-12: Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to…
• CVE-2025-48518 - CVSS 6.9 (medium), 2026-02-11: Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of…
• CVE-2025-48503 - CVSS 7.8 (high), 2026-02-11: A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code…
• CVE-2024-36320 - CVSS 7 (high), 2026-02-11: Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and…
• CVE-2024-36316 - CVSS 5.5 (medium), 2026-02-11: The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service
• CVE-2023-20514 - CVSS 8.7 (high), 2026-02-11: Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the…
• CVE-2024-36324 - CVSS 8.8 (high), 2026-02-11: Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.
• CVE-2025-0011 - CVSS 3.3 (low), 2025-09-06: Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information…
• CVE-2025-0010 - CVSS 6.1 (medium), 2025-09-06: An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidentiality,…
• CVE-2025-0009 - CVSS 5.5 (medium), 2025-09-06: A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a system crash and loss…
• CVE-2024-36352 - CVSS 8.4 (high), 2025-09-06: Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or…
• CVE-2024-36342 - CVSS 8.8 (high), 2025-09-06: Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution.
• CVE-2023-31365 - CVSS 3.9 (low), 2025-09-06: An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area resulting in loss of…
• CVE-2023-31325 - CVSS 7.2 (high), 2025-09-06: Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region…
• CVE-2023-31322 - CVSS 8.7 (high), 2025-09-06: Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS…
• CVE-2023-31326 - CVSS 2.8 (low), 2025-09-06: Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially…
• CVE-2024-21971 - CVSS 5.5 (medium), 2025-02-12: Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an…