Skip to content
OpenAdvisories
High · 7.2 CVE-2023-31313 EUVD-2023-35624GHSA-3c56-h59m-r49v

An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed message…

Published Feb 12, 2026 · Updated Jul 15, 2026 · Assigned by AMD

Description

An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) potentially resulting in arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMD AMD Instinct™ MI210 — ROCm 6.4.2
AMD AMD Instinct™ MI250 — ROCm 6.4.2

Advisories 1

References