CVE-2023-20567: Medium severity amd radeon rx vega m firmware vulnerability
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20567?
The severity of CVE-2023-20567 is considered critical due to its potential for arbitrary code execution.
How do I fix CVE-2023-20567?
To fix CVE-2023-20567, ensure that you update the AMD Radeon Software to the latest version above 23.7.1, as well as the AMD Radeon RX Vega M Firmware to above 23.10.01.46.
What systems are affected by CVE-2023-20567?
CVE-2023-20567 affects systems running AMD Radeon Software versions up to 23.7.1 and AMD Radeon RX Vega M Firmware versions below 23.10.01.46.
Can CVE-2023-20567 be exploited remotely?
CVE-2023-20567 requires an attacker to have local administrator privileges to exploit the vulnerability.
Is there a workaround for CVE-2023-20567?
Currently, there are no documented workarounds for CVE-2023-20567 other than applying the recommended software updates.