Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-31316

27
FAUCET Score

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

First published: May 15, 2026Last modified: May 15, 2026

Impacted Technologies

VendorProductVersion(s)CPE
AMDAMD Instinct™ MI210
Range not provided by sourceCNA affecteddefault affected
AMDAMD Instinct™ MI250
Range not provided by sourceCNA affecteddefault affected
AMDAMD Radeon™ PRO V620
Range not provided by sourceCNA affecteddefault affected
AMDAMD Radeon™ PRO W6000 Series Graphics Products
Range not provided by sourceCNA affecteddefault affected
AMDAMD Radeon™ PRO W7000 Series Graphics Products
Range not provided by sourceCNA affecteddefault affected

CVSS Data

CVSS version used by this source: 4.0

7.1HIGH

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
LOCAL
Attack Complexity
HIGH
Attack Requirements
PRESENT
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
LOW
VS Integrity
HIGH
VS Availability
LOW
SS Confidentiality
LOW
SS Integrity
HIGH
SS Availability
LOW
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.10%
Probability of exploitation in next 30 days
EPSS Percentile
0.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0009 is in the 5th percentile among its peer group of 1,516 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

amd.com / en/resources/product-security/bulletin/AMD-SB-4017.html
amd.com / en/resources/product-security/bulletin/AMD-SB-6027.html