Intel Radeon Rx Vega M Firmware vulnerabilities

3 CVEs affecting Intel Radeon Rx Vega M Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20568, published 2023-11-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-46748, published 2023-11-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential…
• CVE-2023-20568, published 2023-11-14. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature…
• CVE-2023-20567, published 2023-11-14. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature…