# CVE-2023-31345

## Summary

- **CVE ID:** CVE-2023-31345
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
- **CWE:** CWE-1274
- **Published:** Feb 11, 2025
- **Last Modified:** Mar 13, 2026

## Description

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.

## Affected Products

- AMD — AMD EPYC™ 7003 Processors (MilanPI 1.0.0.C)
- AMD — AMD EPYC™ 9004 Processors (GenoaPI 1.0.0.B)
- AMD — AMD Instinct™ MI300A (MI300API 1.0.0.5)
- AMD — AMD Ryzen™ 3000 Series Desktop Processors (ComboAM4v2PI 1.2.0.C)
- AMD — AMD Ryzen™ 5000 Series Desktop Processors (ComboAM4v2PI 1.2.0.C)
- AMD — AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics (ComboAM4v2PI 1.2.0.C)
- AMD — AMD Ryzen™ 7000 Series Desktop Processors (ComboAM5 1.1.0.2)
- AMD — AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics (ComboAM4v2PI 1.2.0.C)
- AMD — AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics (ComboAM5 1.1.0.2)
- AMD — AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors (ChagallWSPI-sWRX8 1.0.0.7)
- AMD — AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics ("Pollock-FT5 1.0.0.7")
- AMD — AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics ("Picasso-FP5 1.0.1.1")
- AMD — AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics ("RenoirPI-FP6 1.0.0.D")
- AMD — AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics ("Cezanne-FP6 1.0.1.0")
- AMD — AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics ("MendocinoPI-FT6 1.0.0.6")
- AMD — AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics ("Rembrandt-FP7 1.0.0.A")
- AMD — AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics ("Rembrandt-FP7 1.0.0.A")
- AMD — AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics ("PhoenixPI-FP8-FP7 1.1.0.2")
- AMD — AMD Ryzen™ 7000 Series Mobile Processors ("DragonRangeFL1PI 1.0.0.3C")
- AMD — AMD EPYC™ Embedded 7003 ("EmbMilanPI-SP3  1.0.0.8")
- AMD — AMD EPYC™ Embedded 9004 (EmbGenoaPI-SP5 1.0.0.6)
- AMD — AMD Ryzen™ Embedded 5000 ("EmbAM4PI 1.0.0.5")
- AMD — AMD Ryzen™ Embedded 7000 (EmbeddedAM5PI 1.0.0.1)
- AMD — AMD Ryzen™ Embedded V2000 ("EmbeddedPI-FP6 1.0.0.9")
- AMD — AMD Ryzen™ Embedded V3000 ("Embedded-PI FP7r2 1.0.0.9")

## References

- [CNA](https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html)
- [CNA](https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html)
- [CNA](https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.02%
- **EPSS Percentile:** 5.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._