CVE-2023-31306

LOW

3.3

Descricao

Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arguments to the dynamic power management (DPM) functions resulting in an out of bounds read and loss of availability.

Detalhes CVE

Pontuacao CVSS v3.13.3

SeveridadeLOW

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado9/6/2025

Ultima modificacao9/8/2025

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-129

Referencias

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html(psirt@amd.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.