AMD Secure Processor Power Save State Flaw VCN Firmware Flow Override
CVE-2023-31316 Published on May 15, 2026
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.
Weakness Type
Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation
The product performs a power save/restore operation, but it does not ensure that the integrity of the configuration state is maintained and/or verified between the beginning and ending of the operation.
Affected Versions
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics:- Version Cezanne-FP6 1.0.1.0 is unaffected.
- Version ComboAM5PI 1.0.0.a is unaffected.
- Version ComboAM4v2 1.2.0.Ca is unaffected.
- Version ComboAM4v2 1.2.0.Ca is unaffected.
- Version PhoenixPI-FP8-FP7_1.1.0.0 is unaffected.
- Version Renoir-FP6 1.0.0.D is unaffected.
- Version Rembrandt-FP7 1.0.0.A is unaffected.
- Version MendocinoPI-FT6_1.0.0.6 is unaffected.
- Version DragonRangeFL1PI 1.0.0.3C is unaffected.
- Version EmbeddedPI-FP6_1.0.0.9 is unaffected.
- Version Embedded-PI_FP7r2 1009 is unaffected.
- Version AMD Software: Adrenalin Edition 25.12.1 (25.10.37.01) is unaffected.
- Version AMD Software: Adrenalin Edition 25.11.1 (25.20.29.01) is unaffected.
- Version AMD Software: PRO Edition 25.Q3.1 (25.10.32) is unaffected.
- Version AMD Software: PRO Edition 25.Q4 (25.10.37.01) is unaffected.
- Version ROCm 6.4 is unaffected.
- Version ROCm 6.4 is unaffected.
- Version Contact your AMD Customer Engineering representative is unaffected.