CVE-2023-20568

Summary

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
AMDRadeon™ RX 5000/6000/7000 Series Graphics Cardsvariousaffected
AMDRadeon™ PRO W5000/W6000/W7000 Series Graphics Cardsvariousaffected
AMDRadeon™ RX Vega Series Graphics Cardsvariousaffected
AMDRadeon™ PRO WX Vega Series Graphics Cardsvariousaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References