CVE-2023-20508
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-20508
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker, potentially leading to loss of confidentiality, integrity, or availability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1284
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD Graphics Driver 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Graphics Driver是美国超威半导体（AMD）公司的一款集成显卡驱动程序。 AMD Graphics Driver存在安全漏洞，该漏洞源于ASP中的不当访问控制可能允许特权攻击者对攻击者不受控制的内存位置执行越界写入，从而可能导致机密性、完整性或可用性的丧失。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AMD | AMD Radeon™ RX 6000 Series Graphics Products | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Radeon™ PRO W6000 Series Graphics Products | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Radeon™ Instinct™ MI25 | Contact your AMD Customer Engineering representative | - | |
| AMD | AMD Radeon™ PRO V520 | Contact your AMD Customer Engineering representative | - | |
| AMD | AMD Radeon™ PRO V620 | Contact your AMD Customer Engineering representative | - | |
| AMD | AMD Radeon™ PRO V710 | Contact your AMD Customer Engineering representative | - | |
| AMD | AMD Instinct™ MI300A | MI300PI 1.0.0.5 | - | |
| AMD | AMD Instinct™ MI300X | BKC 24.12 | - | |
| AMD | AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 7030 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - | |
| AMD | AMD Ryzen™ 7045 Series Mobile Processors | AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) | - |
II. Public POCs for CVE-2023-20508
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-20508
请登录查看更多情报信息。
Same Patch Batch · AMD · 2025-02-11 · 16 CVEs total
| CVE-2024-21924 | 8.2 HIGH | AMD System Management Mode 安全漏洞 |
| CVE-2024-21925 | 8.2 HIGH | AMD System Management Mode 安全漏洞 |
| CVE-2024-0179 | 8.2 HIGH | AMD System Management Mode 安全漏洞 |
| CVE-2023-31342 | 7.5 HIGH | AMD Server Processor 输入验证错误漏洞 |
| CVE-2023-31343 | 7.5 HIGH | AMD Server Processor 输入验证错误漏洞 |
| CVE-2023-31345 | 7.5 HIGH | AMD Server Processor 输入验证错误漏洞 |
| CVE-2024-21966 | 7.3 HIGH | AMD Ryzen Master 安全漏洞 |
| CVE-2023-31360 | 7.3 HIGH | AMD Integrated Management Technology 安全漏洞 |
| CVE-2023-31361 | 7.3 HIGH | AMD Integrated Management Technology 安全漏洞 |
| CVE-2023-31352 | 6.0 MEDIUM | AMD Server Processor 缓冲区错误漏洞 |
| CVE-2023-20515 | 5.7 MEDIUM | AMD Client Processor 安全漏洞 |
| CVE-2023-20582 | 5.3 MEDIUM | AMD Server Processor 安全漏洞 |
| CVE-2023-31331 | 3.0 LOW | AMD Client Processor 安全漏洞 |
| CVE-2023-20581 | 2.5 LOW | AMD Server Processor 安全漏洞 |
| CVE-2023-20507 | 2.3 LOW | AMD Client Processor 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-1284
- CVE-2026-25863
Conditional Fields for Contact Form 7 < 2.7.3 DoS via Uncont - CVE-2025-14688
IBM® Db2® is vulnerable to a denial of service when fetching - CVE-2026-6915
Flaw in the updateUser Command May Allow Unauthorized Config - CVE-2026-1352
IBM® Db2® is vulnerable to a trap or return SQLCODE -901 whe - CVE-2026-6839
ONE 安全漏洞
V. Comments for CVE-2023-20508
No comments yet