PT-2026-7850 · Amd · Power Management Firmware

Published 2026-02-12 · Updated 2026-02-13 · CVE-2023-31313

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions AMD power management firmware (PMFW) (affected versions not specified)

Description An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU), potentially resulting in arbitrary code execution. The system management unit (SMU) is a component responsible for managing power and other system-level functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-441

Related Identifiers

CVE-2023-31313

Affected Products

Power Management Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-31313 · Security Note
• https://t.me/CVEtracker/44535 · Telegram Post
• https://twitter.com/CVEnew/status/2021980018239492564 · Twitter Post
• https://t.me/cveNotify/151933 · Telegram Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html · Note