Denial of Service via OOB Read in AMD SMU Firmware Virtual Function
CVE-2023-31308 Published on August 31, 2026
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.
Vulnerability Analysis
CVE-2023-31308 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a small impact on availability.
Weakness Type
What is an out-of-bounds array index Vulnerability?
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
CVE-2023-31308 has been classified to as an out-of-bounds array index vulnerability or weakness.