AMD -AMD Radeon™ PRO W7000 Series Graphics Products

• CVE-2026-43603 Medium 6.9 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service. 0.2%
• CVE-2021-46747 High 7.1 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leadi <0.1%
• CVE-2024-36323 High 8.8 Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victi <0.1%
• CVE-2024-36333 High 7.0 A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 0.1%
• CVE-2025-0044 Medium 4.8 An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability. <0.1%
• CVE-2023-31317 High 8.8 Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrar 0.1%
• CVE-2025-66660 Low 1.8 Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting 0.1%
• CVE-2025-66664 Medium 4.6 Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read, 0.1%
• CVE-2023-31316 High 7.1 Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the tru <0.1%
• CVE-2024-36319 Medium 6.3 Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentiall 0.1%
• CVE-2025-48518 Medium 6.9 Improper input validation in AMD Graphics Driver could allow a local attacker to write out of bounds, potentially resulting in loss of integrity or denial of service. 0.2%
• CVE-2024-36320 High 7.0 Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability 0.2%
• CVE-2023-20514 High 8.7 Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arb 0.2%
• CVE-2024-36324 High 8.8 Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution. 0.2%
• CVE-2024-36316 Medium 5.5 The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service 0.2%
• CVE-2025-48503 High 7.8 A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. 0.1%
• CVE-2025-0011 Low 3.3 Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address information potentially resulting in loss of confidentiality 0.2%
• CVE-2025-0010 Medium 6.1 An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resulting in loss of confidentiality, integrity, or availability. 0.1%
• CVE-2025-0009 Medium 5.5 A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potentially resulting in a system crash and loss of availability. 0.1%
• CVE-2024-36352 High 8.4 Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service. 0.1%
• CVE-2024-36342 High 8.8 Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution. 0.2%
• CVE-2023-31365 Low 3.9 An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reserved dRAM area resulting in loss of integrity or availability. 0.1%
• CVE-2023-31326 Low 2.8 Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality. 0.1%
• CVE-2023-31325 High 7.2 Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentialit 0.1%
• CVE-2023-31322 High 8.7 Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially leading to a read or write 0.1%
• CVE-2024-21971 Medium 5.5 Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading t 0.1%