CVE-2023-20548: AMD Radeon Pro Vii Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.

Affected products

• AMD Radeon Pro Vii Firmware: affected versions not specified
• AMD Radeon Software: before 25.q2 (fixed in 25.q2); before 24.6.1 (fixed in 24.6.1)
• AMD Radeon Vii Firmware: affected versions not specified
• AMD Rocm: before 6.2.0 (fixed in 6.2.0)

Published 2026-02-11. Last modified 2026-06-17.