Main Vulnerability Database Vulnerabilities #VU96643

Input validation error in AMD products - CVE-2023-20510

Published: August 30, 2024

Vulnerability identifier: #VU96643

CSH Severity: Low

CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-20510

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient DRAM address validation in PMFW. A local user can perform a denial of service (DoS) attack.

AMD Instinct MI100
AMD Radeon Instinct MI25
AMD Radeon PRO V520
AMD Radeon PRO V620
Radeon RX 6000 Series
Radeon PRO W6000 Series

Install updates from vendor's website.

Radeon RX 6000 Series - update to 23.12.1
Radeon PRO W6000 Series - update to 23.30.13.03