CVE-2023-31309CWE-129

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data…

Medium · published May 15, 2026

CVSS v4.0
6.8
EPSS
0%
Percentile
1.3
In the wild
Unconfirmed
What it is

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00112 · 1.3th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2026-05-15T02:48Z
EPSS history
Timeline
  • 15 MAY 02:48Z
    Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data…
    cvelistv5