CVE-2023-31306

State: Published
Severity: 3.3 Low
Published: Sep 6, 2025
Updated: Sep 8, 2025
Reserved: Apr 27, 2023

Description

Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions resulting in an out of bounds read and loss of availability.

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	AMD

Weaknesses

CWE-129 Improper Validation of Array Index

Affected Products

Product	Versions
AMD Radeon™ RX 5000 Series Graphics ProductsAMD	No fix plannedNot affected
AMD Radeon™ PRO W5000 Series Graphics ProductsAMD	No fix plannedNot affected
AMD Radeon™ RX 6000 Series Graphics ProductsAMD	AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)Not affected
AMD Radeon™ PRO W6000 Series Graphics ProductsAMD	AMD Software: PRO Edition 24.Q4 (24.20.30)Not affected
AMD Radeon™ PRO V520 Graphics ProductsAMD	Contact your AMD Customer Engineering representativeNot affected
AMD Radeon™ PRO V620 Graphics ProductsAMD	Contact your AMD Customer Engineering representativeNot affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.