← back
CVE-2023-31351

CVE-2023-31351

CVSS 5.3 MEDIUMEPSS 0.1%CWE-119
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Sep 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integrity.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
Affected products
AMD · AMD EPYC™ 7003 Series ProcessorsAMD · AMD EPYC™ 8004 Series ProcessorsAMD · AMD EPYC™ 9004 Series ProcessorsAMD · AMD EPYC™ Embedded 7003 Series ProcessorsAMD · AMD EPYC™ Embedded 9004 Series Processors

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.htmlhttps://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html