Home

Description

Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability.

PUBLISHED Reserved 2023-04-27 | Published 2026-02-12 | Updated 2026-02-12 | Assigner AMD




HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L

Problem types

CWE-843 Access of Resource Using Incompatible Type (‘Type Confusion’)

Product status

Default status
affected

AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
unaffected

Default status
affected

AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
unaffected

Default status
affected

No fix planned
affected

Default status
affected

No fix planned
affected

Default status
affected

ROCm 6.2
unaffected

Default status
affected

ROCm 6.2
unaffected

Default status
affected

ROCm 6.2
unaffected

Default status
affected

ROCm 6.2
unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-6024.html

cve.org (CVE-2023-31323)

nvd.nist.gov (CVE-2023-31323)

Download JSON