{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Radeon bezeichnet eine Familie von Grafikkarten von AMD.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in AMD Chipsätzen wie Radeon und Ryzen ausnutzen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- BIOS/Firmware",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-1697 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1697.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-1697 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1697"
    }, {
      "category" : "external",
      "summary" : "AMD Security Bulletin amd-sb-6027 vom 2026-05-27",
      "url" : "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html"
    }, {
      "category" : "external",
      "summary" : "HP Security Bulletin HPSBHF04127 vom 2026-06-12",
      "url" : "https://support.hp.com/de-de/document/ish_15142748-15143245-16/HPSBHF04127"
    } ],
    "source_lang" : "en-US",
    "title" : "AMD Chipsätze: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-06-16T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-06-17T08:39:58.186+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-1697",
      "initial_release_date" : "2026-05-27T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-05-27T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-06-01T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Referenz(en) aufgenommen: EUVD-2021-34843"
      }, {
        "date" : "2026-06-16T22:00:00.000+00:00",
        "number" : "3",
        "summary" : "Neue Updates von HP aufgenommen"
      } ],
      "status" : "final",
      "version" : "3"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version",
          "name" : "Ryzen Series",
          "product" : {
            "name" : "AMD Prozessor Ryzen Series",
            "product_id" : "T054775",
            "product_identification_helper" : {
              "cpe" : "cpe:/h:amd:amd_processor:ryzen_series"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Ryzen Embedded Series",
          "product" : {
            "name" : "AMD Prozessor Ryzen Embedded Series",
            "product_id" : "T054776",
            "product_identification_helper" : {
              "cpe" : "cpe:/h:amd:amd_processor:ryzen_embedded_series"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Prozessor"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "PRO Graphics Cards",
          "product" : {
            "name" : "AMD Radeon PRO Graphics Cards",
            "product_id" : "T054772",
            "product_identification_helper" : {
              "cpe" : "cpe:/h:amd:radeon:pro_graphics_cards"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Graphics Cards",
          "product" : {
            "name" : "AMD Radeon Graphics Cards",
            "product_id" : "T054774",
            "product_identification_helper" : {
              "cpe" : "cpe:/h:amd:radeon:graphics_cards"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Radeon"
      } ],
      "category" : "vendor",
      "name" : "AMD"
    }, {
      "branches" : [ {
        "category" : "product_name",
        "name" : "HP Computer",
        "product" : {
          "name" : "HP Computer",
          "product_id" : "T048140",
          "product_identification_helper" : {
            "cpe" : "cpe:/h:hp:computer:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "HP"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2021-26380",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2021-26380"
  }, {
    "cve" : "CVE-2021-46747",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2021-46747"
  }, {
    "cve" : "CVE-2022-23817",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2022-23817"
  }, {
    "cve" : "CVE-2022-23826",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2022-23826"
  }, {
    "cve" : "CVE-2023-31309",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2023-31309"
  }, {
    "cve" : "CVE-2023-31316",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2023-31316"
  }, {
    "cve" : "CVE-2023-31317",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2023-31317"
  }, {
    "cve" : "CVE-2024-21950",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2024-21950"
  }, {
    "cve" : "CVE-2024-36323",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2024-36323"
  }, {
    "cve" : "CVE-2024-36332",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2024-36332"
  }, {
    "cve" : "CVE-2024-36333",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2024-36333"
  }, {
    "cve" : "CVE-2024-363331",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2024-363331"
  }, {
    "cve" : "CVE-2024-36334",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2024-36334"
  }, {
    "cve" : "CVE-2025-0040",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2025-0040"
  }, {
    "cve" : "CVE-2025-0044",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2025-0044"
  }, {
    "cve" : "CVE-2025-52532",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2025-52532"
  }, {
    "cve" : "CVE-2025-54511",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2025-54511"
  }, {
    "cve" : "CVE-2025-54517",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2025-54517"
  }, {
    "cve" : "CVE-2025-66660",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2025-66660"
  }, {
    "cve" : "CVE-2025-66664",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2025-66664"
  }, {
    "cve" : "CVE-2026-0427",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2026-0427"
  }, {
    "cve" : "CVE-2026-0428",
    "product_status" : {
      "known_affected" : [ "T054772", "T048140", "T054776", "T054775", "T054774" ]
    },
    "release_date" : "2026-05-27T22:00:00.000+00:00",
    "title" : "CVE-2026-0428"
  } ]
}