CVE-2023-31320 : Improper input validation in the AMD RadeonTM Graphics display driver may allow

Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of service.

Published 2023-11-14 19:15:25

Updated 2023-11-30 15:10:44

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2023-31320

AMD » Radeon Software » Adrenalin Edition
Versions before (<) 23.7.1
cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
Matching versions
When used together with: AMD » Radeon Rx 5300 » Version: N/A
When used together with: AMD » Radeon Rx 5300 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5300m » Version: N/A
When used together with: AMD » Radeon Rx 5500 » Version: N/A
When used together with: AMD » Radeon Rx 5500 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5500m » Version: N/A
When used together with: AMD » Radeon Rx 5600 » Version: N/A
When used together with: AMD » Radeon Rx 5600 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5600m » Version: N/A
When used together with: AMD » Radeon Rx 5700 » Version: N/A
When used together with: AMD » Radeon Rx 5700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5700m » Version: N/A
When used together with: AMD » Radeon Rx 6300m » Version: N/A
When used together with: AMD » Radeon Rx 6400 » Version: N/A
When used together with: AMD » Radeon Rx 6450m » Version: N/A
When used together with: AMD » Radeon Rx 6500 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6500m » Version: N/A
When used together with: AMD » Radeon Rx 6550m » Version: N/A
When used together with: AMD » Radeon Rx 6550s » Version: N/A
When used together with: AMD » Radeon Rx 6600 » Version: N/A
When used together with: AMD » Radeon Rx 6600 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6600m » Version: N/A
When used together with: AMD » Radeon Rx 6600s » Version: N/A
When used together with: AMD » Radeon Rx 6650 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6650m » Version: N/A
When used together with: AMD » Radeon Rx 6650m Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700 » Version: N/A
When used together with: AMD » Radeon Rx 6700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700m » Version: N/A
When used together with: AMD » Radeon Rx 6700s » Version: N/A
When used together with: AMD » Radeon Rx 6800 » Version: N/A
When used together with: AMD » Radeon Rx 6800 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6800m » Version: N/A
When used together with: AMD » Radeon Rx 6800s » Version: N/A
When used together with: AMD » Radeon Rx 6850m Xt » Version: N/A
When used together with: AMD » Radeon Rx 6900 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6950 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7600 » Version: N/A
When used together with: AMD » Radeon Rx 7600m » Version: N/A
When used together with: AMD » Radeon Rx 7600m Xt » Version: N/A
When used together with: AMD » Radeon Rx 7600s » Version: N/A
When used together with: AMD » Radeon Rx 7700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7700s » Version: N/A
When used together with: AMD » Radeon Rx 7800 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7900 Gre » Version: N/A
When used together with: AMD » Radeon Rx 7900 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7900 Xtx » Version: N/A
When used together with: AMD » Radeon Rx 7900m » Version: N/A
AMD » Radeon Software » PRO Edition
Versions before (<) 23.q3
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
Matching versions
When used together with: AMD » Radeon Pro W5500 » Version: N/A
When used together with: AMD » Radeon Pro W5500x » Version: N/A
When used together with: AMD » Radeon Pro W5700 » Version: N/A
When used together with: AMD » Radeon Pro W5700x » Version: N/A
When used together with: AMD » Radeon Pro W6300 » Version: N/A
When used together with: AMD » Radeon Pro W6300m » Version: N/A
When used together with: AMD » Radeon Pro W6400 » Version: N/A
When used together with: AMD » Radeon Pro W6500m » Version: N/A
When used together with: AMD » Radeon Pro W6600 » Version: N/A
When used together with: AMD » Radeon Pro W6600m » Version: N/A
When used together with: AMD » Radeon Pro W6600x » Version: N/A
When used together with: AMD » Radeon Pro W6800 » Version: N/A
When used together with: AMD » Radeon Pro W6800x » Version: N/A
When used together with: AMD » Radeon Pro W6800x Duo » Version: N/A
When used together with: AMD » Radeon Pro W6900x » Version: N/A
When used together with: AMD » Radeon Pro W7500 » Version: N/A
When used together with: AMD » Radeon Pro W7600 » Version: N/A
When used together with: AMD » Radeon Pro W7800 » Version: N/A
AMD » Radeon Rx Vega 56 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_rx_vega_56_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Rx Vega 56 » Version: N/A
AMD » Radeon Rx Vega 64 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_rx_vega_64_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Rx Vega 64 » Version: N/A
AMD » Radeon Pro Vega 56 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_pro_vega_56_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Pro Vega 56 » Version: N/A
AMD » Radeon Pro Vega 64 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_pro_vega_64_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Pro Vega 64 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-31320

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-31320

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2023-31320

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-31320

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

AMD Graphics Driver Vulnerabilities – November 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-31320

Products affected by CVE-2023-31320

Exploit prediction scoring system (EPSS) score for CVE-2023-31320

CVSS scores for CVE-2023-31320

CWE ids for CVE-2023-31320

References for CVE-2023-31320