Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-31339

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.

Published

2024-08-13T17:15:20.870

Last Modified

2024-11-27T15:55:02.843

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd trusted_firmware-a < 2023.2 Yes
Operating System arm trusted_firmware-a < 2.10.1 Yes
Hardware amd zu11eg - No
Hardware amd zu15eg - No
Hardware amd zu17eg - No
Hardware amd zu19eg - No
Hardware amd zu1cg - No
Hardware amd zu1eg - No
Hardware amd zu21dr - No
Hardware amd zu25dr - No
Hardware amd zu27dr - No
Hardware amd zu28dr - No
Hardware amd zu29dr - No
Hardware amd zu2cg - No
Hardware amd zu2eg - No
Hardware amd zu39dr - No
Hardware amd zu3cg - No
Hardware amd zu3eg - No
Hardware amd zu3tcg - No
Hardware amd zu3teg - No
Hardware amd zu42dr - No
Hardware amd zu43dr - No
Hardware amd zu46dr - No
Hardware amd zu47dr - No
Hardware amd zu48dr - No
Hardware amd zu49dr - No
Hardware amd zu4cg - No
Hardware amd zu4eg - No
Hardware amd zu4ev - No
Hardware amd zu5cg - No
Hardware amd zu5eg - No
Hardware amd zu5ev - No
Hardware amd zu63dr - No
Hardware amd zu64dr - No
Hardware amd zu65dr - No
Hardware amd zu67dr - No
Hardware amd zu6cg - No
Hardware amd zu6eg - No
Hardware amd zu7cg - No
Hardware amd zu7eg - No
Hardware amd zu7ev - No
Hardware amd zu9cg - No
Hardware amd zu9eg - No
References