7.1 High

CVE-2023-31316 Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure…

Description

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

Affected products and versions

Product	Affected versions	Fixed in
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7000 Series Desktop Processors	Versions not published
AMD Ryzen™ 4000 Series Desktop Processors	Versions not published
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics	Versions not published

Show the 9 other branches

Product	Affected versions	Fixed in
AMD Ryzen™ Embedded V2000 Series Processors	Versions not published
AMD Ryzen™ Embedded V3000 Series Processors	Versions not published
AMD Radeon™ RX 6000 Series Graphics Products	Versions not published
AMD Radeon™ RX 7000 Series Graphics Products	Versions not published
AMD Radeon™ PRO W7000 Series Graphics Products	Versions not published
AMD Radeon™ PRO W6000 Series Graphics Products	Versions not published
AMD Instinct™ MI250	Versions not published
AMD Instinct™ MI210	Versions not published
AMD Radeon™ PRO V620	Versions not published

References

www.amd.com www.amd.com
www.amd.com www.amd.com

Timeline

Published May 15, 2026
Last modified May 15, 2026

The 46 CVEs of AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics →

CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… 6.9 Medium CVE-2023-20577 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… 7.4 High CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 High CVE-2025-54518 Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to… 7.3 High

Track this CVE