What is the CVSS score of CVE-2023-20548?

CVE-2023-20548 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Radeon Pro Vii Firmware are affected by CVE-2023-20548?

CVE-2023-20548 affects ROCm (AMD's open-source compute platform) and enables memory corruption attacks that could compromise data integrity and system availability.

How to fix or mitigate CVE-2023-20548?

Within 24 hours: Identify all systems running ROCm and assess business criticality; notify stakeholders of the vulnerability and interim restrictions. Within 7 days: Implement network segmentation to isolate ROCm-dependent systems from trusted networks; disable ROCm features if not operationally critical. Within 30 days: Monitor AMD's patch release timeline; establish testing procedures for the patch once available; conduct vulnerability rescans post-remediation.

Radeon Pro Vii Firmware CVE-2023-20548

HIGH

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-02-11 psirt@amd.com

Race Condition Radeon Pro Vii Firmware Radeon Software Radeon Vii Firmware Rocm

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

CVE Published

Feb 11, 2026 - 15:16 nvd

HIGH 7.8

DescriptionNVD

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.

AnalysisAI

Rocm contains a vulnerability that allows attackers to corrupt memory resulting in loss of integrity, confidentiality, or availability (CVSS 7.8).

Technical ContextAI

affects Rocm. A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.

RemediationAI

Monitor vendor advisories for a patch.

CVE-2023-20548 vulnerability details – vuln.today

Back

Radeon Pro Vii Firmware CVE-2023-20548

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code