Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-31313

An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) pot

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) potentially resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Instinct™ MI210

Default version status: affected

  • ROCm 6.4.2unaffected

AMD AMD Instinct™ MI250

Default version status: affected

  • ROCm 6.4.2unaffected

References