CVEvulnerability

CVE-2023-31309

6.8 MEDIUM Published 2026-05-15 Modified 2026-10-28 Official page ↗
Status
Awaiting Analysis
Published
2026-05-15
Last modified
2026-10-28
Assigner
[email protected]
CVSS 4.0 ([email protected])
6.8 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-129

Description

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

Related

Weakness · CWE (1)

  • CWE-129 Improper Validation of Array Index weakness

References