CVE-2023-20567

MEDIUM
6.7
CVSS Score
Published: November 14, 2023 at 06:51 PM UTC
Updated: June 17, 2026 at 05:30 AM UTC
131 products affected across 2 vendorsRadeon SoftwareRadeon Rx Vega 56 FirmwareRadeon Rx Vega 64 Firmware

Using Radeon™ RX 5000/6000/7000 Series Graphics Cards by AMD?

Get instant alerts when new vulnerabilities affect Radeon™ RX 5000/6000/7000 Series Graphics Cards - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.7
Exploit prediction
EPSS 0.2%

Description

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

All versions
amd-radeon-pro-vega-56 (same device)
All versions
amd-radeon-pro-vega-64 (same device)
All versions
amd-radeon-rx-vega-56 (same device)
All versions
amd-radeon-rx-vega-64 (same device)
v < 23.7.1v < 23.q3
Affected range stops below 23.7.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 23.q3, so it looks safe — our inference, not a vendor statement
amd-ryzen-3-3015ce (environment) · amd-ryzen-3-3015e (environment) · amd-ryzen-3-4100 (environment) · amd-ryzen-3-4300g (environment) · amd-ryzen-3-4300ge (environment) · amd-ryzen-3-4300u (environment) · amd-ryzen-3-5300g (environment) · amd-ryzen-3-5300ge (environment) · amd-ryzen-3-5300u (environment) · amd-ryzen-5-4500 (environment) · amd-ryzen-5-4500u (environment) · amd-ryzen-5-4600g (environment) · amd-ryzen-5-4600ge (environment) · amd-ryzen-5-4600h (environment) · amd-ryzen-5-4600hs (environment) · amd-ryzen-5-4600u (environment) · amd-ryzen-5-4680u (environment) · amd-ryzen-5-5500h (environment) · amd-ryzen-5-5500u (environment) · amd-ryzen-5-5600g (environment) · amd-ryzen-5-5600ge (environment) · amd-ryzen-5-pro-3200g (environment) · amd-ryzen-5-pro-3200ge (environment) · amd-ryzen-5-pro-3350g (environment) · amd-ryzen-5-pro-3350ge (environment) · amd-ryzen-5-pro-3400g (environment) · amd-ryzen-5-pro-3400ge (environment) · amd-ryzen-7-4700g (environment) · amd-ryzen-7-4700ge (environment) · amd-ryzen-7-4700u (environment) · amd-ryzen-7-4800h (environment) · amd-ryzen-7-4800hs (environment) · amd-ryzen-7-4980u (environment) · amd-ryzen-7-5700g (environment) · amd-ryzen-7-5700ge (environment) · amd-ryzen-7-5700u (environment) · amd-ryzen-9-4900h (environment) · amd-ryzen-9-4900hs (environment) · amd-radeon-pro-w5500 (same device) · amd-radeon-pro-w5500x (same device) · amd-radeon-pro-w5700 (same device) · amd-radeon-pro-w5700x (same device) · amd-radeon-pro-w6300 (same device) · amd-radeon-pro-w6300m (same device) · amd-radeon-pro-w6400 (same device) · amd-radeon-pro-w6500m (same device) · amd-radeon-pro-w6600 (same device) · amd-radeon-pro-w6600m (same device) · amd-radeon-pro-w6600x (same device) · amd-radeon-pro-w6800 (same device) · amd-radeon-pro-w6800x (same device) · amd-radeon-pro-w6800x-duo (same device) · amd-radeon-pro-w6900x (same device) · amd-radeon-pro-w7500 (same device) · amd-radeon-pro-w7600 (same device) · amd-radeon-pro-w7800 (same device) · amd-radeon-rx-5300 (same device) · amd-radeon-rx-5300-xt (same device) · amd-radeon-rx-5300m (same device) · amd-radeon-rx-5500 (same device) · amd-radeon-rx-5500-xt (same device) · amd-radeon-rx-5500m (same device) · amd-radeon-rx-5600 (same device) · amd-radeon-rx-5600-xt (same device) · amd-radeon-rx-5600m (same device) · amd-radeon-rx-5700 (same device) · amd-radeon-rx-5700-xt (same device) · amd-radeon-rx-5700m (same device) · amd-radeon-rx-6300m (same device) · amd-radeon-rx-6400 (same device) · amd-radeon-rx-6450m (same device) · amd-radeon-rx-6500-xt (same device) · amd-radeon-rx-6500m (same device) · amd-radeon-rx-6550m (same device) · amd-radeon-rx-6550s (same device) · amd-radeon-rx-6600 (same device) · amd-radeon-rx-6600-xt (same device) · amd-radeon-rx-6600m (same device) · amd-radeon-rx-6600s (same device) · amd-radeon-rx-6650-xt (same device) · amd-radeon-rx-6650m (same device) · amd-radeon-rx-6650m-xt (same device) · amd-radeon-rx-6700 (same device) · amd-radeon-rx-6700-xt (same device) · amd-radeon-rx-6700m (same device) · amd-radeon-rx-6700s (same device) · amd-radeon-rx-6800 (same device) · amd-radeon-rx-6800-xt (same device) · amd-radeon-rx-6800m (same device) · amd-radeon-rx-6800s (same device) · amd-radeon-rx-6850m-xt (same device) · amd-radeon-rx-6900-xt (same device) · amd-radeon-rx-6950-xt (same device) · amd-radeon-rx-7600 (same device) · amd-radeon-rx-7600m (same device) · amd-radeon-rx-7600m-xt (same device) · amd-radeon-rx-7600s (same device) · amd-radeon-rx-7700-xt (same device) · amd-radeon-rx-7700s (same device) · amd-radeon-rx-7800-xt (same device) · amd-radeon-rx-7900-gre (same device) · amd-radeon-rx-7900-xt (same device) · amd-radeon-rx-7900-xtx (same device) · amd-radeon-rx-7900m (same device)
v < 23.10.01.46
Affected range stops below 23.10.01.46, so it looks safe — our inference, not a vendor statement
intel-core-i5-8305g (environment) · intel-core-i7-8705g (environment) · intel-core-i7-8706g (environment) · intel-core-i7-8709g (environment) · intel-nuc-8-enthusiast-nuc8i7hnkqc (environment) · intel-nuc-8-enthusiast-nuc8i7hvkva (environment) · intel-nuc-8-enthusiast-nuc8i7hvkvaw (environment) · intel-nuc-kit-nuc8i7hnk (environment) · intel-nuc-kit-nuc8i7hvk (environment)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-347

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card