CVE-2023-31326

Published: Sep 6, 2025Modified: Jun 17, 2026Deferred

2.8

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Exploitability: 1.1 / Impact: 1.4

Source: psirt@amd.com (Secondary)

Description

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.

Related CWEs

CWE-457

Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

References (3)

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html

Source: psirt@amd.com

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html

Source: psirt@amd.com

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html

Source: psirt@amd.com

Timeline

No history available yet.