CVE-2023-31307

Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service.

Score

CVSS 3.1 4.4 Medium

Status

Analyzed - psirt@amd.com

Published

2024-08-13

Last modified

2024-12-03

Weaknesses

CWE-129

Affected products

• Amd Radeon Pro W6000 Series Graphics Cards (Amd)
• Amd Radeon Rx 6000 Series Graphics Cards (Amd)
• Radeon Software (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html