Improper array index validation in AMD Radeon™ RX 6000 Series Graphics Cards
Priority LOW 19CWE-129Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-129 and the CVSS impact.
Summary
Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00153 4th percentileScored 2026-11-07
Fix Fixed AMD Radeon™ RX 6000 Series Graphics Cards (AMD): AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)AMD Radeon™ PRO W6000 Series Graphics Cards (AMD): AMD Software: PRO Edition 23.Q4 (23.30.13.03)
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD Radeon™ RX 6000 Series Graphics Cards | — | AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01) | Patch available | CNA |
| AMD | AMD Radeon™ PRO W6000 Series Graphics Cards | — | AMD Software: PRO Edition 23.Q4 (23.30.13.03) | Patch available | CNA |
- AMD Radeon™ RX 6000 Series Graphics Cards VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01) Patch available CNA
- AMD Radeon™ PRO W6000 Series Graphics Cards VendorAMD Affected — Fixed in AMD Software: PRO Edition 23.Q4 (23.30.13.03) Patch available CNA
CPE configurations NVD · 33
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:* | before 23.12.1 | Vulnerable | AMD |
| cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:* Versions before 23.12.1 Vulnerable ·AMD
- cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 23 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6750_gre:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* | up to 23.q4 | Vulnerable | AMD |
| cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6750_gre:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:* Versions up to 23.q4 Vulnerable ·AMD
- cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
- Fix · CNA AMD Radeon™ RX 6000 Series Graphics Cards (AMD) Fixed in AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)
- Fix · CNA AMD Radeon™ PRO W6000 Series Graphics Cards (AMD) Fixed in AMD Software: PRO Edition 23.Q4 (23.30.13.03)
Timeline
- 2026-10-02 Threatist record created from CVE-2023-31307
- 2026-10-03 Alias added: GHSA-mw9q-g6cf-hfc4
References
More AMD Radeon Software vulnerabilities
- TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
- TI-2023-07036 A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which… CVSS 3.1CRITICAL 9.8
- TI-2024-14587 Incorrect default permissions in AMD Software: PRO Edition CVSS 3.1HIGH 7.8
- TI-2021-08184 Improper access control in AMD Radeon RX 6000 Series & PRO W6000 Series CVSS 3.1HIGH 7.8
- TI-2023-14993 Improper input validation in AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards CVSS 3.1HIGH 7.5
- TI-2021-08212 Improper signature verification in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1HIGH 7.8
Sources
- CVE-2023-31307 · CVE Program
- CVE-2023-31307 · NVD
- FIRST EPSS
- GHSA-mw9q-g6cf-hfc4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences