CVE-2023-31308CWE-129

CVE-2023-31308

Low · published August 31, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00096 · 0.7th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2026-08-31T23:16Z
References (1)
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html · [email protected]
EPSS history
Timeline
  • 02 SEP 03:26Z
    EPSS moved — → 0%
    epss
  • 31 AUG 18:24Z
    A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read
    cvelistv5