CVE-2023-31339 in Zynq UltraScale+ MPSoC RFSoC

Riassunto

di MITRE • 13/08/2024

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: AMD
• Prenotare: 27/04/2023
• Divulgazione: 13/08/2024
• Moderazione: accettato
• Voce: VDB-274395
• CPE: pronto
• CWE: CWE-125 (confermato)
• CVSS: 5.8 (NVD)
• EPSS: 0.00159
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-31339
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-31339
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-31339/