rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-20578 
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.
Affected products: vendor: AMD
product: AMD EPYC™ 7001 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 7002 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 7003 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 9004 Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 5000WX Processors
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 3000
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7002
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9003
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000
default_status: affected
vendor: AMD
product: AMD RyzenTM Embedded V3000
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2024-08-13T16:52:58.457Z
CVE-2023-20579 
Improper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel mode) privileged access to bypass protections potentially resulting in
loss of integrity and availability.





















Affected products: vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics  
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7000 Series Desktop Processor 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7045 Series Mobile Processors 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V3000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics 
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
default_status: unaffected
Published: 2024-02-13T19:32:11.904Z
CVE-2023-20581 
Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity.
Problem types: cwe_id: CWE-1284
description: CWE-1284 Improper Validation of Specified Quantity in Input
Affected products: vendor: AMD
product: AMD EPYC™ 9004 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9004
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.5
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N
version: 3.1
Published: 2025-02-11T21:26:11.128Z
CVE-2023-20582 
Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity.
Problem types: cwe_id: CWE-1284
description: CWE-1284 Improper Validation of Specified Quantity in Input
Affected products: vendor: AMD
product: AMD EPYC™ 9004 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9004
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
version: 3.1
Published: 2025-02-11T21:35:15.949Z
CVE-2023-20583 Software based Power Side Channel on AMD CPUs 
A potential power side-channel vulnerability in
AMD processors may allow an authenticated attacker to monitor the CPU power
consumption as the data in a cache line changes over time potentially resulting
in a leak of sensitive information.














Affected products: vendor: AMD
product: Processors
default_status: unaffected
Published: 2023-08-01T18:00:43.783Z
CVE-2023-20584 
IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.
Affected products: vendor: AMD
product: AMD EPYC™ 7003 Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 9004 Processors
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
version: 3.1
Published: 2024-08-13T16:53:18.373Z
CVE-2023-20585 
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.
Problem types: cwe_id: CWE-788
description: CWE-788  Access of Memory Location After End of Buffer
Affected products: vendor: AMD
product: AMD EPYC™ 7003 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 9004 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7003 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9004 Series Processors
default_status: affected
Published: 2026-04-16T18:42:28.281Z
CVE-2023-20586 Radeon™ Software Crimson ReLive Edition

A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edition falls outside of the security support lifecycle and AMD does not plan to release any mitigations
















Affected products: vendor: AMD
product: Radeon™ Software Crimson ReLive Edition
default_status: affected
Published: 2023-08-08T17:05:16.338Z
CVE-2023-20587 
Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.

















Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 4th Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: affected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: AMD EPYC(TM) Embedded 3000 
default_status: unaffected
vendor: AMD
product: AMD EPYC(TM) Embedded 7002 
default_status: unaffected
vendor: AMD
product: AMD EPYC(TM) Embedded 7003
default_status: unaffected
vendor: AMD
product: AMD EPYC(TM) Embedded 9003
default_status: unaffected
Published: 2024-02-13T19:31:22.706Z
CVE-2023-20588 Speculative Leaks

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. 








Affected products: vendor: AMD
product: EPYC™ 7001 Processors
default_status: affected
vendor: AMD
product: Athlon™ 3000 Series Processors with Radeon™ Graphics 
default_status: affected
vendor: AMD
product: Ryzen™ 3000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics 
default_status: affected
vendor: AMD
product: Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics
default_status: affected
Published: 2023-08-08T17:06:30.065Z
CVE-2023-20589 fTPM Voltage Fault Injection 

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. 


















Affected products: vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors
default_status: affected
vendor: AMD
product: Ryzen™ PRO 3000 Series Desktop Processors
default_status: affected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics
default_status: affected
vendor: AMD
product: Athlon™ 3000 Series Processors with Radeon™ Graphics 
default_status: affected
vendor: AMD
product: Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics
default_status: affected
vendor: AMD
product: Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ PRO 4000 Series Desktop Processors
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Desktop Processors 
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor:  
product: Ryzen™ PRO 5000 Series Desktop Processors
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ 2000 Series Processors 
default_status: affected
vendor: AMD
product:  Ryzen™ Threadripper™ 5000 Series Processors
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ 3000 Series Processors
default_status: affected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ PRO 5000 Series Processors
default_status: affected
vendor: AMD
product: Ryzen™ 6000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ PRO 6000 Series Processors
default_status: affected
vendor: AMD
product: Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ 7030 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ PRO 7030 Series Processors
default_status: affected
vendor: AMD
product: Ryzen™ 7035 Series Processors with Radeon™ Graphics 
default_status: affected
Published: 2023-08-08T17:04:17.854Z
CVE-2023-20591 
Improper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform configuration to persist, allowing an attacker
to read or modify hypervisor memory, potentially resulting in loss of
confidentiality, integrity, and availability.
Affected products: vendor: AMD
product: AMD EPYC™ 7003  Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ 9004 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7003 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 9003 Series Processors
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Published: 2024-08-13T16:53:23.681Z
CVE-2023-20592 
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.













Affected products: vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor:  AMD
product: 3rd Gen AMD EPYC™ Processors 
default_status: unaffected
Published: 2023-11-14T18:54:13.255Z
CVE-2023-20593 
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
Affected products: vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” AM4
default_status: affected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Lucienne”
default_status: affected
vendor: AMD
product: Ryzen™ 4000 Series Mobile processors with Radeon™ Graphics “Renoir”
default_status: affected
vendor: AMD
product: Ryzen™ 7020 Series processors “Mendocino” FT6
default_status: affected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: affected
Published: 2023-07-24T19:38:43.385Z
CVE-2023-20594 
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
Problem types: cwe_id: CWE-824
description: CWE-824 Access of Uninitialized Pointer
Affected products: vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse”
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Desktop Processors “Vermeer”
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics  “Cezanne”
default_status: affected
vendor: AMD
product: Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” AM4
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS SP3
default_status: affected
vendor: AMD
product: Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”
default_status: affected
vendor: AMD
product: Ryzen™ 6000 Series Mobile Processors with Radeon™ Graphics "Rembrandt"
default_status: affected
vendor: AMD
product: Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics "Rembrandt-R"
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics "Barcelo"
default_status: affected
vendor: AMD
product: Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”
default_status: affected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 7000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000
default_status: affected
Published: 2023-09-20T17:27:59.742Z
CVE-2023-20596 
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.









Affected products: vendor: AMD
product: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 7000 Series  Desktop Processors  with Radeon™ Graphics Formerly codenamed “Raphael”
default_status: unaffected
vendor: AMD
product: Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” X3D
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”
default_status: unaffected
vendor: AMD
product: Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Formerly codenamed “Phoenix”
default_status: unaffected
Published: 2023-11-14T18:55:14.665Z
CVE-2023-20597 
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
Problem types: cwe_id: CWE-824
description: CWE-824 Access of Uninitialized Pointer
Affected products: vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse”
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Desktop Processors “Vermeer”
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics  “Cezanne”
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3
default_status: affected
vendor: AMD
product: Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS SP3
default_status: affected
vendor: AMD
product: Ryzen™ 6000 Series Mobile Processors with Radeon™ Graphics "Rembrandt"
default_status: affected
vendor: AMD
product: Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics "Rembrandt-R"
default_status: affected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics "Barcelo"
default_status: affected
vendor: AMD
product: Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded 5000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000
default_status: affected
Published: 2023-09-20T17:32:18.969Z
CVE-2023-20598 



An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.




Affected products: vendor:  AMD
product: Radeon™ RX 5000 Series Graphics Cards
default_status: affected
vendor: AMD
product: Radeon™ RX 6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: Radeon™ RX 7000 Series Graphics Cards
default_status: affected
vendor: AMD
product: Radeon™ PRO W5000 Series Graphics Cards
default_status: affected
vendor: AMD
product: Radeon™ PRO W6000 Series Graphics Cards
default_status: affected
vendor: AMD
product: Radeon™ PRO W7000 Series Graphics Cards
default_status: affected
vendor: AMD
product: Ryzen™ 7045 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product:  Ryzen™ 7020 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ 7040 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ 7000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ 6000 Series Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: Ryzen™ 7035 Series Processors with Radeon™ Graphics
default_status: affected
Published: 2023-10-17T13:26:21.731Z
CVE-2023-20599 
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.
Problem types: cwe_id: CWE-1262
description: CWE-1262  Register Interface Allows Software Access to Sensitive Data or Security Settings
Affected products: vendor: AMD
product: AMD EPYC™ 7002 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ 3000 Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 3000 WX Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7002 Series Processors
default_status: affected
vendor: AMD
product: AMD EPYC™ Embedded 7003 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 7.9
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Published: 2025-06-10T16:15:03.641Z
CVE-2023-20601 
Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially resulting in a denial-of-service condition.
Problem types: cwe_id: CWE-129
description: CWE-129  Improper Validation of Array Index
Affected products: vendor: AMD
product: AMD Radeon™ PRO VII
default_status: affected
vendor: AMD
product: AMD Radeon™ VII
default_status: affected
Published: 2026-02-12T17:31:40.694Z
CVE-2023-20602 
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494107; Issue ID: ALPS07494107.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6885, MT6889, MT6893, MT6895, MT6983
Published: 2023-02-06T00:00:00.000Z
CVE-2023-20604 
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067.
Problem types: description: Elevation of Privilege
Affected products: vendor: MediaTek, Inc.
product: MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167, MT8362A
Published: 2023-02-06T00:00:00.000Z