CVE-2023-31308

LowCVSS 3.3/10Last modified Sep 3, 2026

Description

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-129

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Aug 31, 2026
Last modified
Sep 3, 2026
NVD status
Awaiting Analysis

Related CVEs from 2023

CVE-2023-313096.8Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when expoCVE-2023-31314.3The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a cCVE-2023-313105.0Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set tCVE-2023-313137.2An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messagesCVE-2023-313157.5Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SCVE-2023-313167.1Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) couldCVE-2023-313178.8Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read orCVE-2023-31327.5The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufCVE-2023-313207.5Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in CVE-2023-313228.7Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted CVE-2023-313238.4Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory InterconCVE-2023-313247.8A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memo
CVE-2023-31308: Low severity, CVSS 3.3 | Vulnix