High severity · published Nov 14, 2023
CVE-2023-31320
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Radeon Pro Vega 56 Firmware · Amd
All versions, or not specified · source: NVD
RP
Radeon Pro Vega 64 Firmware · Amd
All versions, or not specified · source: NVD
RR
Radeon RX Vega 56 Firmware · Amd
All versions, or not specified · source: NVD
RR
Radeon RX Vega 64 Firmware · Amd
All versions, or not specified · source: NVD
RS
Radeon Software · Amd
before 23.7.1; before 23.q3; before 23.7.1; before 23.q3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-31320
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-31320
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
More from Radeon Pro Vega 56 Firmware
6.7
CVE-2023-20568
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the…
6.7
CVE-2023-20567
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating…
5.5
CVE-2021-46748
Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application)…