CVE-2023-20598: High severity amd radeon rx 5300 firmware vulnerability

Published Oct 17, 2023
·
Updated

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Affected Software

110 affected components
All of the following
Any of the following
AMD Radeon Rx 5300
AMD Radeon Rx 5300 Xt
AMD Radeon Rx 5300m
AMD Radeon Rx 5500
AMD Radeon Rx 5500 Xt
AMD Radeon Rx 5500m
AMD Radeon Rx 5600
AMD Radeon Rx 5600 Xt
AMD Radeon Rx 5600m
AMD Radeon Rx 5700
AMD Radeon Rx 5700 Xt
AMD Radeon Rx 5700m
AMD Radeon Rx 6300m
AMD Radeon Rx 6400
AMD Radeon Rx 6450m
AMD Radeon Rx 6500 Xt
AMD Radeon Rx 6500m
AMD Radeon Rx 6550m
AMD Radeon Rx 6550s
AMD Radeon Rx 6600
AMD Radeon Rx 6600 Xt
AMD Radeon Rx 6600m
AMD Radeon Rx 6600s
AMD Radeon Rx 6650 Xt
AMD Radeon Rx 6650m
AMD Radeon Rx 6650m Xt
AMD Radeon Rx 6700
AMD Radeon Rx 6700 Xt
AMD Radeon Rx 6700m
AMD Radeon Rx 6700s
AMD Radeon Rx 6750 Gre 10gb
AMD Radeon Rx 6750 Gre 12gb
AMD Radeon Rx 6750 Xt
AMD Radeon Rx 6800
AMD Radeon Rx 6800 Xt
AMD Radeon Rx 6800s
AMD Radeon Rx 6900 Xt
AMD Radeon Rx 6950 Xt
AMD Radeon Rx 7600
AMD Radeon Rx 7600m
AMD Radeon Rx 7600m Xt
AMD Radeon Rx 7600s
AMD Radeon Rx 7700 Xt
AMD Radeon Rx 7700s
AMD Radeon Rx 7800 Xt
AMD Radeon Rx 7900 Gre
AMD Radeon Rx 7900 Xt
AMD Radeon Rx 7900 Xtx
AMD Radeon Rx 7900m
AMD Radeon Software<23.9.2
All of the following
Any of the following
AMD Radeon Pro W5500
AMD Radeon Pro W5700
AMD Radeon Pro W6300
AMD Radeon Pro W6400
AMD Radeon Pro W6600
AMD Radeon Pro W6800
AMD Radeon Pro W7500
AMD Radeon Pro W7600
AMD Radeon Pro W7800
AMD Radeon Pro W7900
AMD Radeon Software<23.q4
All of the following
Any of the following
AMD Ryzen 3 7320u
AMD Ryzen 3 7335u
AMD Ryzen 3 7440u
AMD Ryzen 5 6600h
AMD Ryzen 5 6600hs
AMD Ryzen 5 6600u
AMD Ryzen 5 7500f
AMD Ryzen 5 7520u
AMD Ryzen 5 7535hs
AMD Ryzen 5 7535u
AMD Ryzen 5 7540u
AMD Ryzen 5 7600
AMD Ryzen 5 7600x
AMD Ryzen 5 7640h
AMD Ryzen 5 7640u
AMD Ryzen 5 7645hx
AMD Ryzen 5 Pro 7640hs
AMD Ryzen 5 Pro 7645
AMD Ryzen 7 6800h
AMD Ryzen 7 6800hs
AMD Ryzen 7 6800u
AMD Ryzen 7 7700
AMD Ryzen 7 7700x
AMD Ryzen 7 7735hs
AMD Ryzen 7 7735u
AMD Ryzen 7 7736u
AMD Ryzen 7 7745hx
AMD Ryzen 7 7800x3d
AMD Ryzen 7 7840h
AMD Ryzen 7 7840u
AMD Ryzen 7 Pro 7745
AMD Ryzen 7 Pro 7840hs
AMD Ryzen 9 6900hs
AMD Ryzen 9 6900hx
AMD Ryzen 9 6980hs
AMD Ryzen 9 6980hx
AMD Ryzen 9 7845hx
AMD Ryzen 9 7900
AMD Ryzen 9 7900x
AMD Ryzen 9 7900x3d
AMD Ryzen 9 7940h
AMD Ryzen 9 7945hx
AMD Ryzen 9 7945hx3d
AMD Ryzen 9 7950x
AMD Ryzen 9 7950x3d
AMD Ryzen 9 Pro 7940hs
AMD Ryzen 9 Pro 7945
Any of the following
AMD Radeon Software<23.9.2
AMD Radeon Software<23.q4

Event History

Oct 17, 2023
CVE Published
via MITRE·01:26 PM
Data Sourced
via MITRE·01:26 PM
Description
Data Sourced
02:15 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-20598?

CVE-2023-20598 has a high severity rating due to the potential for arbitrary code execution by an authenticated attacker.

2

How do I fix CVE-2023-20598?

To fix CVE-2023-20598, update to the latest version of AMD Radeon Software that addresses the vulnerability.

3

Which AMD products are affected by CVE-2023-20598?

CVE-2023-20598 affects various AMD Radeon graphics cards and software, particularly those prior to version 23.9.2.

4

What could happen if CVE-2023-20598 is exploited?

If exploited, CVE-2023-20598 could allow an attacker to gain I/O control over arbitrary hardware ports, leading to potential malicious activity.

5

How can I determine if my AMD graphics driver is vulnerable to CVE-2023-20598?

You can determine vulnerability to CVE-2023-20598 by checking your installed version of AMD Radeon Software against the fixed versions provided by AMD.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203