AMD has finally responded to the recent vBIOS updates pushed by Sapphire and Gigabyte for Radeon RX 7000 series graphics cards, but this statement still reveals few details.
German media outlet ComputerBase previously asked Sapphire about the specific fixes included in this firmware update last week, and AMD subsequently responded to the media through Sapphire. Earlier this month, Sapphire began providing new vBIOS updates for RX 7600 to RX 7900 XTX series graphics cards, stating that the update was intended to address a security issue discovered in collaboration with AMD, but did not provide further details. Subsequently, Gigabyte also released a related update, further pointing out that this update aims to fix a security vulnerability in AMD vBIOS labeled "AMD-SN-6023." However, as of now, there is still no entry related to this vulnerability on AMD's official product security page.
In its response, AMD stated: "Following standard procedures, AMD is releasing firmware updates to address potential security vulnerabilities. We provide relevant fixes before publicly disclosing vulnerability information, giving users sufficient time to update their firmware. We recommend that users adopt good practices and upgrade their firmware as soon as their graphics card manufacturer releases corresponding updates. Currently, there are no reports indicating that these vulnerabilities have been exploited in real-world environments."
AMD has still not disclosed the specific details of the vulnerability. However, based on its statement, relevant information may be officially released in the future. Currently, only Sapphire and Gigabyte have provided new firmware updates, while the official support pages for ASUS, PowerColor, and XFX do not yet have related updates. Given that there are no reports of the vulnerability being actively exploited so far, users of graphics cards from other brands can wait for their respective manufacturers to release official updates. It is not recommended to directly flash firmware provided by other manufacturers, as this may cause compatibility issues or prevent the graphics card from functioning properly.