CVE-2023-31320

Published: Nov 14, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.

Affected (6)

Products: Amd: Radeon Rx Vega 56 Firmware, Radeon Rx Vega 64 Firmware, Radeon Pro Vega 56 Firmware, Radeon Pro Vega 64 Firmware, Radeon Software

Amd

5 products

Radeon Rx Vega 56 Firmware

Radeon Rx Vega 64 Firmware

Radeon Pro Vega 56 Firmware

Radeon Pro Vega 64 Firmware

Radeon Software

Configuration A

48 platform

Running on/with	Platform Versions
Amd Radeon Rx 5300	All versions
Amd Radeon Rx 5300 Xt	All versions
Amd Radeon Rx 5300m	All versions
Amd Radeon Rx 5500	All versions
Amd Radeon Rx 5500 Xt	All versions
Amd Radeon Rx 5500m	All versions
Amd Radeon Rx 5600	All versions
Amd Radeon Rx 5600 Xt	All versions
Amd Radeon Rx 5600m	All versions
Amd Radeon Rx 5700	All versions
Amd Radeon Rx 5700 Xt	All versions
Amd Radeon Rx 5700m	All versions
Amd Radeon Rx 6300m	All versions
Amd Radeon Rx 6400	All versions
Amd Radeon Rx 6450m	All versions
Amd Radeon Rx 6500 Xt	All versions
Amd Radeon Rx 6500m	All versions
Amd Radeon Rx 6550m	All versions
Amd Radeon Rx 6550s	All versions
Amd Radeon Rx 6600	All versions
Amd Radeon Rx 6600 Xt	All versions
Amd Radeon Rx 6600m	All versions
Amd Radeon Rx 6600s	All versions
Amd Radeon Rx 6650 Xt	All versions
Amd Radeon Rx 6650m	All versions
Amd Radeon Rx 6650m Xt	All versions
Amd Radeon Rx 6700	All versions
Amd Radeon Rx 6700 Xt	All versions
Amd Radeon Rx 6700m	All versions
Amd Radeon Rx 6700s	All versions
Amd Radeon Rx 6800	All versions
Amd Radeon Rx 6800 Xt	All versions
Amd Radeon Rx 6800m	All versions
Amd Radeon Rx 6800s	All versions
Amd Radeon Rx 6850m Xt	All versions
Amd Radeon Rx 6900 Xt	All versions
Amd Radeon Rx 6950 Xt	All versions
Amd Radeon Rx 7600	All versions
Amd Radeon Rx 7600m	All versions
Amd Radeon Rx 7600m Xt	All versions
Amd Radeon Rx 7600s	All versions
Amd Radeon Rx 7700 Xt	All versions
Amd Radeon Rx 7700s	All versions
Amd Radeon Rx 7800 Xt	All versions
Amd Radeon Rx 7900 Gre	All versions
Amd Radeon Rx 7900 Xt	All versions
Amd Radeon Rx 7900 Xtx	All versions
Amd Radeon Rx 7900m	All versions

Configuration B

18 platform

Running on/with	Platform Versions
Amd Radeon Pro W5500	All versions
Amd Radeon Pro W5500x	All versions
Amd Radeon Pro W5700	All versions
Amd Radeon Pro W5700x	All versions
Amd Radeon Pro W6300	All versions
Amd Radeon Pro W6300m	All versions
Amd Radeon Pro W6400	All versions
Amd Radeon Pro W6500m	All versions
Amd Radeon Pro W6600	All versions
Amd Radeon Pro W6600m	All versions
Amd Radeon Pro W6600x	All versions
Amd Radeon Pro W6800	All versions
Amd Radeon Pro W6800x	All versions
Amd Radeon Pro W6800x Duo	All versions
Amd Radeon Pro W6900x	All versions
Amd Radeon Pro W7500	All versions
Amd Radeon Pro W7600	All versions
Amd Radeon Pro W7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Radeon Rx Vega 56 Firmware	All versions

Running on/with	Platform Versions
Amd Radeon Rx Vega 56	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Radeon Rx Vega 64 Firmware	All versions

Running on/with	Platform Versions
Amd Radeon Rx Vega 64	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Radeon Pro Vega 56 Firmware	All versions

Running on/with	Platform Versions
Amd Radeon Pro Vega 56	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Radeon Pro Vega 64 Firmware	All versions

Running on/with	Platform Versions
Amd Radeon Pro Vega 64	All versions

Configuration G

2 vulnerable · 38 platform

Vulnerable Software	Affected Versions
Amd Radeon Software	Before 23.7.1
Amd Radeon Software	Before 23.q3

Running on/with	Platform Versions
Amd Ryzen 3 3015ce	All versions
Amd Ryzen 3 3015e	All versions
Amd Ryzen 3 4100	All versions
Amd Ryzen 3 4300g	All versions
Amd Ryzen 3 4300ge	All versions
Amd Ryzen 3 4300u	All versions
Amd Ryzen 3 5300g	All versions
Amd Ryzen 3 5300ge	All versions
Amd Ryzen 3 5300u	All versions
Amd Ryzen 5 4500	All versions
Amd Ryzen 5 4500u	All versions
Amd Ryzen 5 4600g	All versions
Amd Ryzen 5 4600ge	All versions
Amd Ryzen 5 4600h	All versions
Amd Ryzen 5 4600hs	All versions
Amd Ryzen 5 4600u	All versions
Amd Ryzen 5 4680u	All versions
Amd Ryzen 5 5500h	All versions
Amd Ryzen 5 5500u	All versions
Amd Ryzen 5 5600g	All versions
Amd Ryzen 5 5600ge	All versions
Amd Ryzen 5 Pro 3200g	All versions
Amd Ryzen 5 Pro 3200ge	All versions
Amd Ryzen 5 Pro 3350g	All versions
Amd Ryzen 5 Pro 3350ge	All versions
Amd Ryzen 5 Pro 3400g	All versions
Amd Ryzen 5 Pro 3400ge	All versions
Amd Ryzen 7 4700g	All versions
Amd Ryzen 7 4700ge	All versions
Amd Ryzen 7 4700u	All versions
Amd Ryzen 7 4800h	All versions
Amd Ryzen 7 4800hs	All versions
Amd Ryzen 7 4980u	All versions
Amd Ryzen 7 5700g	All versions
Amd Ryzen 7 5700ge	All versions
Amd Ryzen 7 5700u	All versions
Amd Ryzen 9 4900h	All versions
Amd Ryzen 9 4900hs	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.