Lucene search
AMDCVELIST:CVE-2023-31307HistoryAug 13, 2024 - 4:54 p.m.
CVE-2023-31307
2024-08-1316:54:03
AMD
www.cve.org
2
improper array validation
power management firmware
privileged attacker
out-of-bounds memory read
denial of service
CVSS3
2.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
EPSS
0
Percentile
9.5%
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "AMD Radeon™ RX 6000 Series Graphics Cards",
"vendor": "AMD",
"versions": [
{
"status": "unaffected",
"version": "AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)"
}
]
},
{
"defaultStatus": "affected",
"product": "AMD Radeon™ PRO W6000 Series Graphics Cards",
"vendor": "AMD",
"versions": [
{
"status": "unaffected",
"version": "AMD Software: PRO Edition 23.Q4 (23.30.13.03)"
}
]
}
]Related
cve
cve
CVE-2023-31307
2024-08-13 17:15:20
vulnrichment
vulnrichment
CVE-2023-31307
2024-08-13 16:54:03
nvd
nvd
CVE-2023-31307
2024-08-13 17:15:20
amd
amd
AMD Graphics Driver Vulnerabilities – August 2024
2024-08-13 00:00:00
CVSS3
2.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
EPSS
0
Percentile
9.5%
Related for CVELIST:CVE-2023-31307