Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

AMD AMD Ryzenâ„¢ 5000 Series Desktop Processor with Radeonâ„¢ Graphics

CVE-2023-31331
LOW 3.0

En bref

Source
NVD
EPSS
EPSS 0.15 % · centile 4 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
AMD
Statut NVD
Deferred

Rechercher sur…

Description

Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of integrity or availability.

Faiblesses (CWE)

  • CWE-1284 — Validation incorrecte d'une quantité spécifiée en entrée

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1LOW 3.0CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:LAMD
CVSS 3.1LOW 3.0CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:LNVD · psirt@amd.com (Secondary)

Références européennes

Produits affectés

ProduitVersions
AMD · AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphicsunaffected ComboAM4v2PI 1.2.0.CA
AMD · AMD Ryzen™ 7000 Series Desktop Processorsunaffected ComboAM5 1.1.0.2
AMD · AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphicsunaffected ComboAM4v2PI 1.2.0.CA
AMD · AMD Ryzen™ 8000 Series Processor with Radeon™ Graphicsunaffected ComboAM5 1.1.0.2
AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphicsunaffected RenoirPI-FP6 1.0.0.D
AMD · AMD Ryzen™ 5000 Series Processors with Radeon™ Graphicsunaffected Cezanne-FP6 1.0.1.0
AMD · AMD Ryzen™ 6000 Series Processor with Radeon™ Graphicsunaffected Rembrandt-FP7 1.0.0.A
AMD · AMD Ryzen™ 7035 Series Processor with Radeon™ Graphicsunaffected Rembrandt-FP7 1.0.0.A
AMD · AMD Ryzen™ 7040 Series Processors with Radeon™ Graphicsunaffected PhoenixPI-FP8-FP7 1.1.0.2
AMD · AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphicsunaffected PhoenixPI-FP8-FP7 1.1.0.2
AMD · AMD Ryzen™ 7000 Series Mobile Processorsunaffected DragonRangeFL1PI 1.0.0.3C
AMD · AMD Ryzen™ Embedded 7000unaffected EmbeddedAM5PI 1.0.0.1
AMD · AMD Ryzen™ Embedded V2000unaffected EmbeddedPI-FP6 1.0.0.9
AMD · AMD Ryzen™ Embedded V3000unaffected Embedded-PI FP7r2 1.0.0.9

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD