Skip to content
CVE PROGRAM SOURCE RECORD1.9 Low

CVE-2023-31305

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 6000 Series Graphics Cards

Default version status: affected

  • AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)unaffected

AMD AMD Radeon™ PRO W6000 Series Graphics Cards

Default version status: affected

  • AMD Software: PRO Edition 23.Q4 (23.30.13.03)unaffected

References