CVE-2023-31339
5.8
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:H
Exploitability: 0.6 / Impact: 5.2
Source: NVD
Description
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
Affected (2)
Products: Amd: Trusted Firmware A · Trustedfirmware: Trusted Firmware A
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2023.2 | |
| Before 2.10.1 |
| Running on/with | Platform Versions |
|---|---|
Amd Zu11eg | All versions |
Amd Zu15eg | All versions |
Amd Zu17eg | All versions |
Amd Zu19eg | All versions |
Amd Zu1cg | All versions |
Amd Zu1eg | All versions |
Amd Zu21dr | All versions |
Amd Zu25dr | All versions |
Amd Zu27dr | All versions |
Amd Zu28dr | All versions |
Amd Zu29dr | All versions |
Amd Zu2cg | All versions |
Amd Zu2eg | All versions |
Amd Zu39dr | All versions |
Amd Zu3cg | All versions |
Amd Zu3eg | All versions |
Amd Zu3tcg | All versions |
Amd Zu3teg | All versions |
Amd Zu42dr | All versions |
Amd Zu43dr | All versions |
Amd Zu46dr | All versions |
Amd Zu47dr | All versions |
Amd Zu48dr | All versions |
Amd Zu49dr | All versions |
Amd Zu4cg | All versions |
Amd Zu4eg | All versions |
Amd Zu4ev | All versions |
Amd Zu5cg | All versions |
Amd Zu5eg | All versions |
Amd Zu5ev | All versions |
Amd Zu63dr | All versions |
Amd Zu64dr | All versions |
Amd Zu65dr | All versions |
Amd Zu67dr | All versions |
Amd Zu6cg | All versions |
Amd Zu6eg | All versions |
Amd Zu7cg | All versions |
Amd Zu7eg | All versions |
Amd Zu7ev | All versions |
Amd Zu9cg | All versions |
Amd Zu9eg | All versions |
Related CWEs
CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-20
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
References (1)
Source: psirt@amd.com
Broken Link
Timeline
No history available yet.