AMD AMD Radeon RX 5000 Series & PRO W5000 Series

5 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2021-26392AMD Radeon Software – < 22.5.2 ; AMD Radeon Pro Software Enterprise – < 22.Q2 ; Enterprise Driver – < 22.10.20Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with priHIGH 7.80.3 %
CVE-2021-26393AMD Radeon Software – < 22.5.2 ; AMD Radeon Pro Software Enterprise – < 22.Q2 ; Enterprise Driver – < 22.10.20Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with pMEDIUM 5.50.3 %
CVE-2021-26391AMD Radeon Software – < 22.5.2 ; AMD Radeon Pro Software Enterprise – < 22.Q2 ; Enterprise Driver – < 22.10.20Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gaHIGH 7.80.2 %
CVE-2020-12930AMD Radeon Software – < 22.5.2 ; AMD Radeon Pro Software Enterprise – < 22.Q2 ; Enterprise Driver – < 22.10.20Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially lHIGH 7.80.3 %
CVE-2020-12931AMD Radeon Software – < 22.5.2 ; AMD Radeon Pro Software Enterprise – < 22.Q2 ; Enterprise Driver – < 22.10.20Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentiallHIGH 7.80.3 %