Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2023-31323

Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 5000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ PRO W5000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ VII

Default version status: affected

  • No fix plannedaffected

AMD AMD Radeon™ PRO VII

Default version status: affected

  • No fix plannedaffected

AMD AMD Instinct™ MI250

Default version status: affected

  • ROCm 6.2unaffected

AMD AMD Instinct™ MI300A

Default version status: affected

  • ROCm 6.2unaffected

AMD AMD Instinct™ MI210

Default version status: affected

  • ROCm 6.2unaffected

AMD AMD Instinct™ MI300X

Default version status: affected

  • ROCm 6.2unaffected

References