Lucene search
K

22 matches found

CNNVD
CNNVD
added 2025/11/23 12:0 a.m.3 views

AMD Zynq UltraScale+ 安全漏洞

AMD Zynq UltraScale+ is a multiprocessor system-on-chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Zynq UltraScale+ that originates from the unused security state of the calling processor and could result in a non-secure processor accessing secure memory or cryptograph...

8.6CVSS6.6AI score0.00033EPSS
Exploits0References2
Amd
Amd
added 2025/11/11 12:0 a.m.9 views

Missing Use of the Secure Flag in Zynq™ UltraScale+™ SoC Trusted Firmware

Summary A researcher reported that the security state of the calling processor into Trusted Firmware TF-A is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability turn on and off subsystems within the SoC...

8.6CVSS6.6AI score0.00033EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.3 views

CVE-2025-0038

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...

6.6CVSS6.9AI score0.00028EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-15058

Malware in sbrugna...

5.5CVSS5.6AI score0.00024EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/06 6:31 p.m.3 views

EUVD-2025-32545

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...

6.6CVSS6.4AI score0.00028EPSS
Exploits0References2
NVD
NVD
added 2025/10/06 5:16 p.m.4 views

CVE-2025-0038

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...

6.6CVSS0.00028EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/06 4:8 p.m.4 views

CVE-2025-0038

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...

6.6CVSS6.5AI score0.00028EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/06 12:0 a.m.2 views

AMD Zynq UltraScale+ 安全漏洞

AMD Zynq UltraScale+ is a multiprocessor system-on-chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Zynq UltraScale+ that stems from a lack of address validation when executing CSU runtime services, which could result in a loss of integrity and confidentiality...

6.6CVSS6.7AI score0.00028EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-35650

Malicious code in bioql PyPI...

5.8CVSS6.6AI score0.00097EPSS
Exploits0References1
Amd
Amd
added 2025/07/01 12:0 a.m.5 views

Zynq™ UltraScale+™ SoC Overwriting Protected Memory Regions Through PMU Firmware

AMD ID: AMD-SB-8008 Potential Impact: Loss of confidentiality and Integrity Severity: Medium Summary In Zynq™ UltraScale+™ devices, the Platform Management Unit PMU Firmware is designed to implement runtime post boot software services that allow a remote processor to command the PMU to execute...

6.6CVSS7.7AI score0.00028EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:42 a.m.5 views

CVE-2019-5478

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior...

5.5CVSS6.8AI score0.00024EPSS
Exploits0References1
NVD
NVD
added 2024/08/13 5:15 p.m.12 views

CVE-2023-31339

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™ MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service...

5.8CVSS0.00097EPSS
Exploits0References1
OSV
OSV
added 2024/08/13 5:15 p.m.0 views

CVE-2023-31339

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™ MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service...

5.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2024/08/13 4:56 p.m.55 views

CVE-2023-31339

CVE-2023-31339 concerns improper input validation in ARM Trusted Firmware used in AMD Zynq UltraScale+ MPSoC/RFSoC. The vulnerability could allow a privileged attacker to perform out-of-bounds reads, potentially causing data leakage and denial of service. Affected component is the ARM Trusted Fir...

5.8CVSS6.8AI score0.00097EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2024/08/13 4:56 p.m.25 views

CVE-2023-31339

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™ MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service...

4.8CVSS0.00097EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.1 views

AMD Zynq UltraScale+ 安全漏洞

AMD Zynq UltraScale+ is a multiprocessor system-on-chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Zynq UltraScale+ that stems from incorrect input validation in the trusted firmware, which allows a privileged attacker to perform an out-of-bind read, resulting in a dat...

5.8CVSS6.5AI score0.00097EPSS
Exploits0References2
Amd
Amd
added 2024/08/13 12:0 a.m.9 views

Out of Bounds Read in Arm® Trusted Firmware

Bulletin ID: AMD-SB-8003 Potential Impact: Information Integrity Severity: Refer to the Summary section for details Summary Improper input validation in ARM® Trusted Firmware used in AMD ZynqTM UltraScale+TM MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads potentially...

5.8CVSS5.4AI score0.00097EPSS
Exploits0
NVD
NVD
added 2019/09/03 8:15 p.m.12 views

CVE-2019-5478

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior...

5.5CVSS5.4AI score0.00024EPSS
Exploits0References2
Prion
Prion
added 2019/09/03 8:15 p.m.18 views

Design/Logic Flaw

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior...

2.1CVSS5.4AI score0.00024EPSS
Exploits0References2
Cvelist
Cvelist
added 2019/09/03 7:17 p.m.15 views

CVE-2019-5478

A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior...

5.4AI score0.00024EPSS
Exploits0References2
Rows per page
Query Builder