Medium severity · published May 15, 2026
CVE-2023-31309
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM…
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
AMD Radeon™ PRO V520 · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ PRO V620 · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ PRO W6000 Series Graphics Products · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ RX 6000 Series Graphics Products · AMD
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-31309
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-31309
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html
More from AMD Radeon™ PRO V520
8.8
CVE-2024-36324
Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution
7.1
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management…
7.1
CVE-2021-26381
Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially…
5.5
CVE-2024-36316
The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service
5.3
CVE-2025-54511
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and…