AMD AMD Radeon™ VII vulnerabilities

CVE-2024-36333 High · 7.8 CWE-427 May 15, 2026

Uncontrolled Search Path Element in AMD Radeon Software

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

CVE-2022-23826 Low · 1.8 CWE-367 May 15, 2026

TOCTOU Race Condition in AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.

CVE-2021-26380 Low · 1.8 CWE-190 May 15, 2026

Integer Overflow or Wraparound in AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.

CVE-2023-31323 High · 8.4 CWE-843 Feb 12, 2026

Type Confusion in AMD AMD Radeon™ RX 5000 Series Graphics Products

Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability.

CVE-2023-20601 Medium · 4.6 CWE-129 Feb 12, 2026

Improper input validation within RAS TA Driver can allow a local attacker to access…

Improper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds memory, potentially resulting in a denial-of-service condition.

CVE-2024-36320 High · 7.0 CWE-190 Feb 11, 2026

Integer Overflow or Wraparound in AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability

CVE-2023-20548 High · 7.8 CWE-367 Feb 11, 2026

TOCTOU Race Condition in AMD Rocm

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.

CVE-2023-20514 High · 8.7 CWE-233 Feb 11, 2026

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a…

Improper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution