CVE-2023-31351
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-06

Last updated on: 2025-09-08

Assigner: Advanced Micro Devices Inc.

Description
Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-06
Last Modified
2025-09-08
Generated
2026-06-16
AI Q&A
2025-09-06
EPSS Evaluated
2026-06-15
NVD
CVE-2023-31351
EUVD
EUVD-2023-35662
Affected Vendors & Products
Showing 11 associated CPEs
Vendor Product Version / Range
amd ryzen_embedded_5000 *
amd ryzen_embedded_8000 *
amd epyc_embedded_7003 *
amd epyc_embedded_3000 *
amd epyc_embedded_7002 *
amd ryzen_embedded_v3000 *
amd epyc_embedded_900 *
amd ryzen_embedded_7000 *
amd ryzen_embedded_r1000 *
amd ryzen_embedded_r2000 *
amd ryzen_embedded_v2000 *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves improper restriction of operations in the IOMMU (Input-Output Memory Management Unit), which could allow a malicious hypervisor to access the private memory of a guest system. This means that the hypervisor could potentially read or manipulate data that should be isolated and protected within the guest environment, leading to a loss of data integrity.

Impact Analysis

The impact of this vulnerability is that a malicious hypervisor could compromise the integrity of guest private memory. This could lead to unauthorized modification or corruption of data within the guest system, potentially affecting the reliability and trustworthiness of the affected system's operations.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-31351. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart