CVE-2023-31316: High severity AMD Secure Processor (ASP) vulnerability
Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-31316?
CVE-2023-31316 is considered to have a high severity due to the potential for execution flow change in the affected firmware.
How do I fix CVE-2023-31316?
To fix CVE-2023-31316, you need to update the AMD Secure Processor (ASP) and Video Core Next (VCN) firmware to the latest versions provided by AMD.
Who is affected by CVE-2023-31316?
Users of AMD Secure Processor (ASP) and AMD Video Core Next (VCN) firmware may be affected by CVE-2023-31316.
What type of vulnerability is CVE-2023-31316?
CVE-2023-31316 is classified as an integrity vulnerability related to improper preservation during power save/restore operations.
Can CVE-2023-31316 be exploited remotely?
CVE-2023-31316 requires an attacker to have local access and the ability to write outside the trusted memory range, making remote exploitation unlikely.