MEDIUM🇵🇱 Wersja polska

CVE-2023-31339

CVSS 4.8v3.1pub. 2024-08-13upd. 2026-06-05

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H

  • Amd Trusted Firmware A

    OS
    Amd
    < 2023.2

  • Amd Zu11eg

    HW
    Amd
    all versions

  • Amd Zu15eg

    HW
    Amd
    all versions

  • Amd Zu17eg

    HW
    Amd
    all versions

  • Amd Zu19eg

    HW
    Amd
    all versions

  • Amd Zu1cg

    HW
    Amd
    all versions

  • Amd Zu1eg

    HW
    Amd
    all versions

  • Amd Zu21dr

    HW
    Amd
    all versions

  • Amd Zu25dr

    HW
    Amd
    all versions

  • Amd Zu27dr

    HW
    Amd
    all versions

  • Amd Zu28dr

    HW
    Amd
    all versions

  • Amd Zu29dr

    HW
    Amd
    all versions

  • Amd Zu2cg

    HW
    Amd
    all versions

  • Amd Zu2eg

    HW
    Amd
    all versions

  • Amd Zu39dr

    HW
    Amd
    all versions

  • Amd Zu3cg

    HW
    Amd
    all versions

  • Amd Zu3eg

    HW
    Amd
    all versions

  • Amd Zu3tcg

    HW
    Amd
    all versions

  • Amd Zu3teg

    HW
    Amd
    all versions

  • Amd Zu42dr

    HW
    Amd
    all versions

  • Amd Zu43dr

    HW
    Amd
    all versions

  • Amd Zu46dr

    HW
    Amd
    all versions

  • Amd Zu47dr

    HW
    Amd
    all versions

  • Amd Zu48dr

    HW
    Amd
    all versions

  • Amd Zu49dr

    HW
    Amd
    all versions

  • Amd Zu4cg

    HW
    Amd
    all versions

  • Amd Zu4eg

    HW
    Amd
    all versions

  • Amd Zu4ev

    HW
    Amd
    all versions

  • Amd Zu5cg

    HW
    Amd
    all versions

  • Amd Zu5eg

    HW
    Amd
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2022-47630HIGH7.4same product

Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. Th...

CVE-2017-15031HIGH7.5same product

In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMC...

CVE-2017-9607HIGH7.0same product

The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data...

CVE-2017-7564HIGH7.5same product

In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attac...

CVE-2017-7563HIGH8.1same product

In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypas...