CVE-2023-31309: AMD Radeon™ RX 6000 Series Graphics Products

Описание

Оригинално описание

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

Засегнати продукти

• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: PRO Edition 23.Q4
• AMD AMD Radeon™ PRO V520: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V620: Contact your AMD Customer Engineering representative

Вид слабост

• CWE-129 Неправилна валидация на индекс на масив

История

Други уязвимости в AMD AMD Radeon™ RX 6000 Series Graphics Products

• 6.9CVE-2026-43603
• 7.1CVE-2021-46747
• 2.0CVE-2025-52532
• 7.0CVE-2024-36333
• 8.8CVE-2023-31317

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-31309
• https://nvd.nist.gov/vuln/detail/CVE-2023-31309
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html