CVE-2023-31317

State
Published
Severity
8.8 High
Published
May 15, 2026
Updated
May 16, 2026
Reserved
Apr 27, 2023

Read the record on cve.org

Description

Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.

Scores

CVSSScoreVectorSource
4.08.8 HighCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HAMD

Weaknesses

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

ProductVersions
AMD Radeon™ RX 6000 Series Graphics ProductsAMD
  • AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)Not affected
AMD Radeon™ RX 7000 Series Graphics ProductsAMD
  • AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01)Not affected
AMD Radeon™ PRO W7000 Series Graphics ProductsAMD
  • AMD Software: PRO Edition 25.Q3.1 (25.10.32)Not affected
AMD Radeon™ PRO W6000 Series Graphics ProductsAMD
  • AMD Software: PRO Edition 25.Q3.1 (25.10.32)Not affected
AMD Instinct™ MI250AMD
  • ROCm 7.0Not affected
AMD Instinct™ MI210AMD
  • ROCm 7.0Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.