Denial of Service via OOB Read in AMD SMU Firmware Virtual Function
CVE-2023-31308 Published on August 31, 2026
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.
Vulnerability Analysis
CVE-2023-31308 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a small impact on availability.
Weakness Type
What is an out-of-bounds array index Vulnerability?
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
CVE-2023-31308 has been classified to as an out-of-bounds array index vulnerability or weakness.
Affected Versions
AMD Radeon™ PRO V620 Graphics Products Version Contact your AMD Customer Engineering representative is unaffected by CVE-2023-31308Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.