AMD Radeon Rx 6000 Series Graphics Cards vulnerabilities
6 CVEs affecting AMD Radeon Rx 6000 Series Graphics Cards, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31310, published 2024-08-13.
More from AMD.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2023-31304, published 2024-08-13. Low severity, CVSS 2.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to modify the PCIe® lane count and speed, potentially leading to a loss of…
- CVE-2023-20513, published 2024-08-13. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) to send a malformed message, potentially resulting in a…
- CVE-2023-20509, published 2024-08-13. Medium severity, CVSS 5.2. EPSS: 0.1% chance of exploitation in the next 30 days. An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.
- CVE-2023-31310, published 2024-08-13. Medium severity, CVSS 5.0. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting…
- CVE-2023-31305, published 2024-08-13. Low severity, CVSS 1.9. EPSS: 0.1% chance of exploitation in the next 30 days. Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially…
- CVE-2023-20512, published 2024-08-13. Low severity, CVSS 1.9. EPSS: 0.1% chance of exploitation in the next 30 days. A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.