PT-2026-41239 · Unknown · Power Management Firmware

CVE-2023-31309 · Published 2026-05-15 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Power Management Firmware (affected versions not specified)

Description Improper validation in the Power Management Firmware (PMFW) allows a privileged attacker to pass malformed workload arguments during the process of exporting table data from the System Management Unit (SMU) to the Dynamic Random Access Memory (DRAM). This could lead to a loss of confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2023-31309

Affected Products

Power Management Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-31309 · Security Note
• https://t.me/CVEtracker/53854 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2055203413554577832 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html · Note
• https://t.me/cveNotify/163568 · Telegram Post