CVE-2023-31313

HIGH

AMD PMFW - RCE

Title source: llm

Description

An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) potentially resulting in arbitrary code execution.

References (1)

Scores

CVSS v3 7.2
EPSS 0.0001
EPSS Percentile 2.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Classification

CWE
CWE-441
Status draft

Timeline

Published Feb 12, 2026
Tracked Since Feb 18, 2026