Home

Description

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

PUBLISHED Reserved 2023-04-27 | Published 2026-05-15 | Updated 2026-05-15 | Assigner AMD




MEDIUM: 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-129 Improper Validation of Array Index

Product status

Default status
affected

AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)
unaffected

Default status
affected

AMD Software: PRO Edition 23.Q4
unaffected

Default status
affected

Contact your AMD Customer Engineering representative
unaffected

Default status
affected

Contact your AMD Customer Engineering representative
unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-6027.html

cve.org (CVE-2023-31309)

nvd.nist.gov (CVE-2023-31309)

Download JSON