CVE-2023-31316

Severity: high (CVSS 7.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-15 · updated 2026-10-28
Weakness: CWE-1304

Description

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

Affected products

AMD Instinct™ MI210: all versions
AMD Instinct™ MI250: all versions
AMD Radeon™ PRO V620: all versions
AMD Radeon™ PRO W6000 Series Graphics Products: all versions
AMD Radeon™ PRO W7000 Series Graphics Products: all versions
AMD Radeon™ RX 6000 Series Graphics Products: all versions
AMD Radeon™ RX 7000 Series Graphics Products: all versions
AMD Ryzen™ 4000 Series Desktop Processors: all versions
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 7000 Series Desktop Processors: all versions
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ Embedded V2000 Series Processors: all versions
AMD Ryzen™ Embedded V3000 Series Processors: all versions

References

Get alerted when CVE-2023-31316 or the next vulnerability affects your stack