Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2023-31306

Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions result

Description

Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions resulting in an out of bounds read and loss of availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 5000 Series Graphics Products

Default version status: affected

  • No fix plannedunaffected

AMD AMD Radeon™ PRO W5000 Series Graphics Products

Default version status: affected

  • No fix plannedunaffected

AMD AMD Radeon™ RX 6000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)unaffected

AMD AMD Radeon™ PRO W6000 Series Graphics Products

Default version status: affected

  • AMD Software: PRO Edition 24.Q4 (24.20.30)unaffected

AMD AMD Radeon™ PRO V520 Graphics Products

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

AMD AMD Radeon™ PRO V620 Graphics Products

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

References