CVE-2023-31316

Severity CVSS v4.0:

HIGH

Type:

Unavailable / Other

Publication date:

15/05/2026

Last modified:

15/05/2026

Description

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

Impact

Vector 4.0

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L CVSS v4.0 Severity and Metrics:

Base Score: 7.10 HIGH
Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L

Attack Vector (AV): Local
Attack Complexity (AC): High
Attack Requirements (AT): Present
Privileges Required (PR): Low
User Interaction (UI): None
Confidentiality (VC): Low
Integrity (VI): High
Availability (VA): Low
Confidentiality (SC): Low
Integrity (SI): High
Availability (SA): Low

Base Score 4.0

7.10

Severity 4.0

HIGH

CVE-2023-31316

Description

Impact

References to Advisories, Solutions, and Tools