CVE-2023-31309

State: Published
Severity: 6.8 Medium
Published: May 15, 2026
Updated: May 15, 2026
Reserved: Apr 27, 2023

Description

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

Scores

CVSS	Score	Vector	Source
4.0	6.8 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N	AMD

Weaknesses

CWE-129 Improper Validation of Array Index

Affected Products

Product	Versions
AMD Radeon™ RX 6000 Series Graphics ProductsAMD	AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)Not affected
AMD Radeon™ PRO W6000 Series Graphics ProductsAMD	AMD Software: PRO Edition 23.Q4Not affected
AMD Radeon™ PRO V520AMD	Contact your AMD Customer Engineering representativeNot affected
AMD Radeon™ PRO V620AMD	Contact your AMD Customer Engineering representativeNot affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.