Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-31309

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 6000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)unaffected

AMD AMD Radeon™ PRO W6000 Series Graphics Products

Default version status: affected

  • AMD Software: PRO Edition 23.Q4unaffected

AMD AMD Radeon™ PRO V520

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

AMD AMD Radeon™ PRO V620

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

References