CVE-2023-31305 — AMD / AMD Radeon™ RX 6000 Series Graphics Cards

CVE-2023-31305

AMD / AMD Radeon™ RX 6000 Series Graphics Cards PUBLISHED

Description (CNA)

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Radeon™ RX 6000 Series Graphics Cards	unaffected AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)
AMD / AMD Radeon™ PRO W6000 Series Graphics Cards	unaffected AMD Software: PRO Edition 23.Q4 (23.30.13.03)

CWE

No CWE identifiers supplied.

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.