CVE-2023-20598

CVE-2023-20598 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including H4rk3nz0.

AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2023-20598 targeting the AMD Radeon Driver's PDFWKRNL.sys. It demonstrates arbitrary read/write primitives via IOCTL calls to escalate privileges from a low integrity process.

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.