CVSS 4.0
7.1 highCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:LCVE-2023-20548
High (7.1) in amd. EPSS 0.1% chance of exploitation in the next 30 days.
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWE
- CWE-367
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:radeon_pro_vii_firmware
- amd:radeon_software
- amd:radeon_vii_firmware
- amd:rocm