CVE-2023-31351

MEDIUM

AMD EPYC 7003/9004/8004 Series Processors - Memory Access Control Bypass via IOMMU

Title source: llm
STIX 2.1

Description

Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity.

References (2)

Core 2

Scores

CVSS v3 5.3
EPSS 0.0002
EPSS Percentile 5.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-119
Status published
Products (5)
AMD/AMD EPYC™ 7003 Series Processors Milan 100C
AMD/AMD EPYC™ 8004 Series Processors Genoa 100C
AMD/AMD EPYC™ 9004 Series Processors Genoa 100C
AMD/AMD EPYC™ Embedded 7003 Series Processors EmbMilanPI-SP3 1.0.0.9
AMD/AMD EPYC™ Embedded 9004 Series Processors EmbGenoaPI-SP5 1.0.0.7
Published Sep 06, 2025
Tracked Since Feb 18, 2026