A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.
CVSS Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XAmd Instinct Mi210
HWAmdall versionsAmd Instinct Mi250
HWAmdall versionsAmd Instinct Mi300a
HWAmdall versionsAmd Instinct Mi300x
HWAmdall versionsAmd Radeon Pro Vii
HWAmdall versionsAmd Radeon Pro Vii Firmware
OSAmdall versionsAmd Radeon Pro W5500
HWAmdall versionsAmd Radeon Pro W5500x
HWAmdall versionsAmd Radeon Pro W5700
HWAmdall versionsAmd Radeon Pro W5700x
HWAmdall versionsAmd Radeon Rx 5300
HWAmdall versionsAmd Radeon Rx 5300m
HWAmdall versionsAmd Radeon Rx 5300 Xt
HWAmdall versionsAmd Radeon Rx 5500
HWAmdall versionsAmd Radeon Rx 5500m
HWAmdall versionsAmd Radeon Rx 5500 Xt
HWAmdall versionsAmd Radeon Rx 5600
HWAmdall versionsAmd Radeon Rx 5600m
HWAmdall versionsAmd Radeon Rx 5600 Xt
HWAmdall versionsAmd Radeon Rx 5700
HWAmdall versionsAmd Radeon Rx 5700m
HWAmdall versionsAmd Radeon Rx 5700 Xt
HWAmdall versionsAmd Radeon Software
APPAmd< 24.6.1< 25.q2Amd Radeon Vii
HWAmdall versionsAmd Radeon Vii Firmware
OSAmdall versionsAmd Rocm
APPAmd< 6.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Race Condition
CWE
Related vulnerabilities
CVE-2023-20586CRITICAL9.8PL ✓same product
Privilege escalation w AMD Radeon Software Crimson ReLive Edition
CVE-2024-36333HIGH7.0same product
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalati...
CVE-2023-31324HIGH7.1same product
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker ...
CVE-2024-21937HIGH7.3same product
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve pri...
CVE-2023-31320HIGH7.5same product
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the dis...