High · 7.3 CVE-2023-31359 EUVD-2023-35670GHSA-6h82-gp3x-grfp

Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting i…

Published May 13, 2025 · Updated Feb 26, 2026 · Assigned by AMD

Vendor: AMD Product: AIM-T Manageability API

Description

Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
AMD	AIM-T Manageability API	—	6.0.0.2234

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html