EUVD-2023-24749

Malicious code in bioql PyPI...

Authorization

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams...

CVE-2023-20570

Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams...

CVE-2023-20570

The CVE-2023-20570 entry relates to AMD UltraScale/UltraScale+ FPGA devices. The vulnerability stems from insufficient verification of data authenticity in the configuration state machine, which could allow a local attacker to load arbitrary bitstreams. The affected component is the configuration...