CVE-2023-31307: AMD Radeon Software

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service.

Affected products

• AMD Radeon Software: before 23.12.1 (fixed in 23.12.1); up to and including 23.q4

Published 2024-08-13. Last modified 2026-06-17.