CVE-2023-31316

State: Published
Severity: 7.1 High
Published: May 15, 2026
Updated: May 15, 2026
Reserved: Apr 27, 2023

Description

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L	AMD

Weaknesses

CWE-1304 Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation

Affected Products

Product	Versions
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD	Cezanne-FP6 1.0.1.0Not affected
AMD Ryzen™ 7000 Series Desktop ProcessorsAMD	ComboAM5PI 1.0.0.aNot affected
AMD Ryzen™ 4000 Series Desktop ProcessorsAMD	ComboAM4v2 1.2.0.CaNot affected
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD	ComboAM4v2 1.2.0.CaNot affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD	PhoenixPI-FP8-FP7_1.1.0.0Not affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD	Renoir-FP6 1.0.0.DNot affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD	Rembrandt-FP7 1.0.0.ANot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD	MendocinoPI-FT6_1.0.0.6Not affected
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD	DragonRangeFL1PI 1.0.0.3CNot affected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD	EmbeddedPI-FP6_1.0.0.9Not affected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD	Embedded-PI_FP7r2 1009Not affected
AMD Radeon™ RX 6000 Series Graphics ProductsAMD	AMD Software: Adrenalin Edition 25.12.1 (25.10.37.01)Not affected
AMD Radeon™ RX 7000 Series Graphics ProductsAMD	AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01)Not affected
AMD Radeon™ PRO W7000 Series Graphics ProductsAMD	AMD Software: PRO Edition 25.Q3.1 (25.10.32)Not affected
AMD Radeon™ PRO W6000 Series Graphics ProductsAMD	AMD Software: PRO Edition 25.Q4 (25.10.37.01)Not affected
AMD Instinct™ MI250AMD	ROCm 6.4Not affected
AMD Instinct™ MI210AMD	ROCm 6.4Not affected
AMD Radeon™ PRO V620AMD	Contact your AMD Customer Engineering representativeNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.