1.9
Low
CVE-2023-31305 Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an…
Description
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon™ RX 6000 Series Graphics Cards | Versions not published | |
| AMD Radeon™ PRO W6000 Series Graphics Cards | Versions not published |
Other CVEs of AMD Radeon™ RX 6000 Series Graphics Cards
The 9 CVEs of AMD Radeon™ RX 6000 Series Graphics Cards →
CVE-2023-31310
Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a…
5.0
Medium
CVE-2023-31307
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an…
2.3
Low
CVE-2023-31304
Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) …
2.3
Low
CVE-2023-20513
An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF…
3.3
Low