CVE-2023-31309 MEDIUM

CVE-2023-31309

Weakness CWE-129
Published May 15, 2026
Last update May 15, 2026

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM potentially resulting in a loss of confidentiality and/or availability.

Key dates

02Disclosure timeline

May 15, 2026 CVE published
May 15, 2026 Record updated