medium4.8
CVE-2023-31339
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads,…
Impact
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Trusted Firmware-A | before 2023.2 |
| Trustedfirmware | Trusted Firmware-A | before 2.10.1 |