CVE-2023-31306

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions resulting in an out of bounds read and loss of availability.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-129

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-313074.4Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory readCVE-2023-313083.3A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory reaCVE-2023-313096.8Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when expoCVE-2023-31314.3The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a cCVE-2023-313105.0Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set tCVE-2023-313137.2An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messagesCVE-2023-313157.5Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SCVE-2023-313167.1Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) couldCVE-2023-313178.8Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read orCVE-2023-31327.5The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufCVE-2023-313207.5Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in CVE-2023-313228.7Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted
CVE-2023-31306: Low severity, CVSS 3.3 | Vulnix