CVE-2023-31305 | BDVDB-2026-245230 Detail
AMDAMD Radeon™ RX 6000 Series Graphics Cards
Description#
Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.