CVE-2023-31343

Summary

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
AMDAMD EPYC™ 7003 ProcessorsMilanPI 1.0.0.Cunaffected
AMDAMD EPYC™ 9004 ProcessorsGenoaPI 1.0.0.Bunaffected
AMDAMD Instinct™ MI300AMI300API 1.0.0.5unaffected
AMDAMD Ryzen™ 3000 Series Desktop ProcessorsComboAM4v2PI 1.2.0.Cunaffected
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsComboAM4v2PI 1.2.0.Cunaffected
AMDAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsComboAM4v2PI 1.2.0.Cunaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsComboAM5 1.1.0.2unaffected
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsComboAM4v2PI 1.2.0.Cunaffected
AMDAMD Ryzen™ 4000 Series Desktop Processor with Radeon™ GraphicsComboAM4v2PI 1.2.0.Cunaffected
AMDAMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsComboAM5 1.1.0.2unaffected
AMDAMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop ProcessorsChagallWSPI-sWRX8 1.0.0.7unaffected
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics"Pollock-FT5 1.0.0.7"unaffected
AMDAMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics"Picasso-FP5 1.0.1.1"unaffected
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics"RenoirPI-FP6 1.0.0.D"unaffected
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ Graphics"Cezanne-FP6 1.0.1.0"unaffected
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics"MendocinoPI-FT6 1.0.0.6"unaffected
AMDAMD Ryzen™ 6000 Series Processor with Radeon™ Graphics"Rembrandt-FP7 1.0.0.A"unaffected
AMDAMD Ryzen™ 7035 Series Processor with Radeon™ Graphics"Rembrandt-FP7 1.0.0.A"unaffected
AMDAMD Ryzen™ 7040 Series Processors with Radeon™ Graphics"PhoenixPI-FP8-FP7 1.1.0.2"unaffected
AMDAMD Ryzen™ 7000 Series Mobile Processors"DragonRangeFL1PI 1.0.0.3C"unaffected
AMDAMD EPYC™ Embedded 7003"EmbMilanPI-SP3 1.0.0.8"unaffected
AMDAMD EPYC™ Embedded 9004EmbGenoaPI-SP5 1.0.0.6unaffected
AMDAMD Ryzen™ Embedded R1000"EmbeddedPI-FP5 1.2.0.C"unaffected
AMDAMD Ryzen™ Embedded R2000"EmbeddedR2KPI-FP5 1.0.0.3"affected
AMDAMD Ryzen™ Embedded 5000"EmbAM4PI 1.0.0.5"unaffected
AMDAMD Ryzen™ Embedded 7000EmbeddedAM5PI 1.0.0.1unaffected
AMDAMD Ryzen™ Embedded V2000"EmbeddedPI-FP6 1.0.0.9"unaffected
AMDAMD Ryzen™ Embedded V3000"Embedded-PI FP7r2 1.0.0.9"unaffected

Weaknesses

  • CWE-1220: CWE-1220 Insufficient Granularity of Access Control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References