Integer Overflow Vulnerability in AMD's Secure Memory Unit
CVE-2023-31365

3.9LOW

Key Information:

Vendor

Amd
Status
Amd Radeon™ Rx 7000 Series Graphics Products
Amd Radeon™ Pro W7000 Series Graphics Products
Amd Radeon™ Pro V710 Graphics Products
Vendor
CVE Published:
6 September 2025

What is CVE-2023-31365?

An integer overflow vulnerability in AMD's Secure Memory Unit (SMU) could enable a privileged attacker to manipulate memory operations. This vulnerability allows the potential for writing memory beyond the allocated dRAM space, which may compromise the system's integrity and disrupt availability, leading to various security risks.

Affected Version(s)

AMD Radeon™ PRO V710 Graphics Products Contact your AMD Customer Engineering representative

AMD Radeon™ PRO W7000 Series Graphics Products AMD Software: PRO Edition 24.Q1 (23.40.20)

AMD Radeon™ RX 7000 Series Graphics Products AMD Software: Adrenalin Edition 24.1.1 (23.40.02)

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
3.9
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-31365 : Integer Overflow Vulnerability in AMD's Secure Memory Unit