CVE-2023-31307lowCWE-129

CVE-2023-31307: low-severity vulnerability in AMD Radeon™ PRO W6000 Series Graphics Cards

Published · Updated

Follow this CVE+ Monitor AMD Radeon™ PRO W6000 Series Graphics Cards+ Monitor AMD Radeon™ RX 6000 Series Graphics Cards

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.3epss 0.2%
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Affected products
AMD · AMD Radeon™ PRO W6000 Series Graphics CardsAMD · AMD Radeon™ RX 6000 Series Graphics Cards
Related CVEs — AMD Radeon™ PRO W6000 Series Graphics Cards

In the same product, most dangerous first.

CVE-2021-26367MEDIUMCVE-2021-26367EPSS 0.2%CVE-2023-31304LOWCVE-2023-31304EPSS 0.2%CVE-2023-20513LOWCVE-2023-20513EPSS 0.1%CVE-2023-20510MEDIUMCVE-2023-20510EPSS 0.1%CVE-2023-20509MEDIUMCVE-2023-20509EPSS 0.1%CVE-2023-31310MEDIUMCVE-2023-31310EPSS 0.1%