AMD Graphics Driver - integer overflow bypassing size checks: An integer overflow in the AMD graphics driver lets

Impact

An integer overflow in the AMD graphics driver lets an attacker wrap a size calculation and slip past the driver's own bounds checks. The advisory scopes the outcome to denial of service, but overflow-defeats-size-check is the standard front half of a heap corruption chain, so treat the ceiling as higher than the score.

Who can reach it

Local, via the graphics driver interface.

What to do

Update the AMD graphics driver and reload or reboot.

References