Vulnerability in AMD Instinct™ Mi210
CVE-2023-31323
Type confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent (XGMI TA) leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability.
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (4.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 4th percentile — 4.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.002 · change: +0.000
Affected products
- AMD Instinct™ Mi210 — versions ROCm 6.2
- AMD Instinct™ Mi250 — versions ROCm 6.2
- AMD Instinct™ Mi300a — versions ROCm 6.2
- AMD Instinct™ Mi300x — versions ROCm 6.2
- AMD Radeon™ Pro Vii — versions No fix planned
- AMD Radeon™ Pro W5000 Series Graphics Products — versions AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
- AMD Radeon™ Rx 5000 Series Graphics Products — versions AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
- AMD Radeon™ Vii — versions No fix planned