CVE-2023-31316

HIGH
MEDIUM Priority: 0.01 BB Relevance: 29/100
Published: 2026-05-15 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: X
AT: Present
VC: Low
VI: High
VA: Low

Description

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

Weakness Classification (1)

Bug Bounty Relevance

29 / 100
✓ No user interaction

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.10%
Raw Score 0.000950
Percentile 0.6%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00095
2026-10-29
0.00095
2026-10-28
0.00095

Intelligence Sources

nvd ref →