Skip to content
OpenAdvisories
Low · 1.9 CVE-2023-31305 EUVD-2023-35616GHSA-qpx5-6ww4-hp56

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to …

Published Aug 13, 2024 · Updated Nov 6, 2024 · Assigned by AMD

Description

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.

Affected products

VendorProductAffectedFixed
AMD AMD Radeon™ RX 6000 Series Graphics Cards — AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)
AMD AMD Radeon™ PRO W6000 Series Graphics Cards — AMD Software: PRO Edition 23.Q4 (23.30.13.03)

Advisories 1

References