What is CVE-2023-31347?

CVE-2023-31347 is a medium-severity vulnerability in AMD 3rd Gen Epyc™ Processors, classified under Incorrect Calculation. CVSS score: 4.9/10. Published 2024-02-13.

How severe is CVE-2023-31347?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in AMD 3rd Gen Epyc™ Processors

CVE-2023-31347

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.

Published 2024-02-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

EPSS exploit prediction

EPSS: 0.005 (38.5th percentile), scored 2026-10-20.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 39th percentile — 38.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

AMD 3rd Gen Epyc™ Processors — versions various
AMD 4th Gen Epyc™ Processors — versions various
AMD Epyc 7203 Firmware
AMD Epyc 7203p
AMD Epyc 7203p Firmware
AMD Epyc 72f3
AMD Epyc 72f3 Firmware
AMD Epyc 7303
AMD Epyc 7303 Firmware
AMD Epyc 7303p

Weakness classification (CWE)

CWE-682 — Incorrect Calculation

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007 (vendor-advisory, Broken Link)

Frequently asked questions

What is CVE-2023-31347?: CVE-2023-31347 is a medium-severity vulnerability in AMD 3rd Gen Epyc™ Processors, classified under Incorrect Calculation. CVSS score: 4.9/10. Published 2024-02-13.
How severe is CVE-2023-31347?: Medium severity. CVSS v3 base score is 4.9 out of 10.