VULNERABILITY INTELLIGENCE

CVE-2023-31309

EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-10-28

Description

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

Weakness classification

  • psirt@amd.com: CWE-129

Primary references