← CVE Intelligence

CVE-2023-31306

AMD / AMD Radeon™ RX 5000 Series Graphics Products PUBLISHED

Description (CNA)

Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions resulting in an out of bounds read and loss of availability.

Affected (CNA)

Vendor / productVersions
AMD / AMD Radeon™ RX 5000 Series Graphics Productsunaffected No fix planned
AMD / AMD Radeon™ PRO W5000 Series Graphics Productsunaffected No fix planned
AMD / AMD Radeon™ RX 6000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01)
AMD / AMD Radeon™ PRO W6000 Series Graphics Productsunaffected AMD Software: PRO Edition 24.Q4 (24.20.30)
AMD / AMD Radeon™ PRO V520 Graphics Productsunaffected Contact your AMD Customer Engineering representative
AMD / AMD Radeon™ PRO V620 Graphics Productsunaffected Contact your AMD Customer Engineering representative

CWE

CWE-129

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.