CVE-2023-20568: Medium severity amd radeon rx vega m firmware vulnerability
Published Nov 14, 2023
·Updated
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.
Affected Software
126 affected components
All of the following
Intel Radeon Rx Vega M Firmware<23.10.01.46
Any of the following
Intel Core I5-8305g
Intel Core I7-8705g
Intel Core I7-8706g
Intel Core I7-8709g
Intel Nuc 8 Enthusiast Nuc8i7hnkqc
Intel Nuc 8 Enthusiast Nuc8i7hvkva
Intel Nuc 8 Enthusiast Nuc8i7hvkvaw
Intel Nuc Kit Nuc8i7hnk
Intel Nuc Kit Nuc8i7hvk
All of the following
AMD Radeon Software<23.7.1
Any of the following
AMD Radeon Rx 5300
AMD Radeon Rx 5300 Xt
AMD Radeon Rx 5300m
AMD Radeon Rx 5500
AMD Radeon Rx 5500 Xt
AMD Radeon Rx 5500m
AMD Radeon Rx 5600
AMD Radeon Rx 5600 Xt
AMD Radeon Rx 5600m
AMD Radeon Rx 5700
AMD Radeon Rx 5700 Xt
AMD Radeon Rx 5700m
AMD Radeon Rx 6300m
AMD Radeon Rx 6400
AMD Radeon Rx 6450m
AMD Radeon Rx 6500 Xt
AMD Radeon Rx 6500m
AMD Radeon Rx 6550m
AMD Radeon Rx 6550s
AMD Radeon Rx 6600
AMD Radeon Rx 6600 Xt
AMD Radeon Rx 6600m
AMD Radeon Rx 6600s
AMD Radeon Rx 6650 Xt
AMD Radeon Rx 6650m
AMD Radeon Rx 6650m Xt
AMD Radeon Rx 6700
AMD Radeon Rx 6700 Xt
AMD Radeon Rx 6700m
AMD Radeon Rx 6700s
AMD Radeon Rx 6800
AMD Radeon Rx 6800 Xt
AMD Radeon Rx 6800m
AMD Radeon Rx 6800s
AMD Radeon Rx 6850m Xt
AMD Radeon Rx 6900 Xt
AMD Radeon Rx 6950 Xt
AMD Radeon Rx 7600
AMD Radeon Rx 7600m
AMD Radeon Rx 7600m Xt
AMD Radeon Rx 7600s
AMD Radeon Rx 7700 Xt
AMD Radeon Rx 7700s
AMD Radeon Rx 7800 Xt
AMD Radeon Rx 7900 Gre
AMD Radeon Rx 7900 Xt
AMD Radeon Rx 7900 Xtx
AMD Radeon Rx 7900m
All of the following
AMD Radeon Software<23.q3
Any of the following
AMD Radeon Pro W5500
AMD Radeon Pro W5500x
AMD Radeon Pro W5700
AMD Radeon Pro W5700x
AMD Radeon Pro W6300
AMD Radeon Pro W6300m
AMD Radeon Pro W6400
AMD Radeon Pro W6500m
AMD Radeon Pro W6600
AMD Radeon Pro W6600m
AMD Radeon Pro W6600x
AMD Radeon Pro W6800
AMD Radeon Pro W6800x
AMD Radeon Pro W6800x Duo
AMD Radeon Pro W6900x
AMD Radeon Pro W7500
AMD Radeon Pro W7600
AMD Radeon Pro W7800
All of the following
AMD Radeon Rx Vega 56 Firmware
AMD Radeon Rx Vega 56
All of the following
AMD Radeon Rx Vega 64 Firmware
AMD Radeon Rx Vega 64
All of the following
AMD Radeon Pro Vega 56 Firmware
AMD Radeon Pro Vega 56
All of the following
AMD Radeon Pro Vega 64 Firmware
AMD Radeon Pro Vega 64
All of the following
Any of the following
AMD Radeon Software<23.7.1
AMD Radeon Software<23.q3
Any of the following
AMD Ryzen 3 3015ce
AMD Ryzen 3 3015e
AMD Ryzen 3 4100
AMD Ryzen 3 4300g
AMD Ryzen 3 4300ge
AMD Ryzen 3 4300u
AMD Ryzen 3 5300g
AMD Ryzen 3 5300ge
AMD Ryzen 3 5300u
AMD Ryzen 5 4500
AMD Ryzen 5 4500u
AMD Ryzen 5 4600g
AMD Ryzen 5 4600ge
AMD Ryzen 5 4600h
AMD Ryzen 5 4600hs
AMD Ryzen 5 4600u
AMD Ryzen 5 4680u
AMD Ryzen 5 5500h
AMD Ryzen 5 5500u
AMD Ryzen 5 5600g
AMD Ryzen 5 5600ge
AMD Ryzen 5 Pro 3200g
AMD Ryzen 5 Pro 3200ge
AMD Ryzen 5 Pro 3350g
AMD Ryzen 5 Pro 3350ge
AMD Ryzen 5 Pro 3400g
AMD Ryzen 5 Pro 3400ge
AMD Ryzen 7 4700g
AMD Ryzen 7 4700ge
AMD Ryzen 7 4700u
AMD Ryzen 7 4800h
AMD Ryzen 7 4800hs
AMD Ryzen 7 4980u
AMD Ryzen 7 5700g
AMD Ryzen 7 5700ge
AMD Ryzen 7 5700u
AMD Ryzen 9 4900h
AMD Ryzen 9 4900hs
Event History
Nov 14, 2023
CVE Published
via MITRE·06:51 PM
Data Sourced
via MITRE·06:51 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-20568?
CVE-2023-20568 has a critical severity due to improper signature verification that may lead to arbitrary code execution.
2
How do I fix CVE-2023-20568?
To fix CVE-2023-20568, update the AMD Radeon RX Vega M Graphics driver to version 23.10.01.46 or later.
3
Which systems are affected by CVE-2023-20568?
CVE-2023-20568 affects systems using the AMD Radeon RX Vega M Graphics driver prior to version 23.10.01.46.
4
What are the potential impacts of CVE-2023-20568?
The potential impacts of CVE-2023-20568 include arbitrary code execution by an attacker with admin privileges.
5
Is there an exploit available for CVE-2023-20568?
Yes, CVE-2023-20568 may be exploited by an attacker who has administrative access to the affected systems.