Lucene search
HistoryAug 13, 2024 - 5:15 p.m.
CVE-2023-31339
input validation
arm trusted firmware
amd zynq ultrascale+ mpsoc rfsoc
out of bound reads
data leakage
denial of service
CVSS3
4.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H
EPSS
0
Percentile
9.5%
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
Related
amd
amd
Out of Bounds Read in Arm® Trusted Firmware
2024-08-13 00:00:00
cvelist
cvelist
CVE-2023-31339
2024-08-13 16:56:22
vulnrichment
vulnrichment
CVE-2023-31339
2024-08-13 16:56:22
cve
cve
CVE-2023-31339
2024-08-13 17:15:20
CVSS3
4.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H
EPSS
0
Percentile
9.5%
Related for NVD:CVE-2023-31339