CVE-2023-31323

Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability.

Score

CVSS 4.0 8.4 High

Status

Deferred - psirt@amd.com

Published

2026-02-12

Last modified

2026-02-12

Weaknesses

CWE-843

Affected products

• Amd Instinct Mi210 (Amd)
• Amd Instinct Mi250 (Amd)
• Amd Instinct Mi300a (Amd)
• Amd Instinct Mi300x (Amd)
• Amd Radeon Pro Vii (Amd)
• Amd Radeon Pro W5000 Series Graphics Products (Amd)
• Amd Radeon Rx 5000 Series Graphics Products (Amd)
• Amd Radeon Vii (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html