CVE-2023-31345 Details
Description
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
A vulnerability has been identified in the System Management Mode (SMM) handler of certain AMD processors. This issue arises from improper input validation, which may enable a privileged attacker to overwrite System Management RAM (SMRAM). Such an overwrite could lead to arbitrary code execution.
Users are advised to consult the AMD Security Bulletin for guidance on addressing this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Feb 12, 2025CISA-ADP
Assessed Apr 24, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html | [email protected] | Broken LinkVendor |
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html | [email protected] | Broken LinkVendor |
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html | [email protected] | Broken LinkVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1274 | Improper Access Control for Volatile Memory Containing Boot Code | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| AMD | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Sep 23, 2025 | CVE Modified | [email protected] |
| Feb 12, 2025 | New CVE Received | [email protected] |