Medium severity4.8NVD Advisory· Published Aug 13, 2024· Updated Jun 5, 2026

CVE-2023-31339

Description

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.

Affected products

AMD/Trusted Firmware A
cpe:2.3:o:amd:trusted_firmware-a:*:*:*:*:*:*:*:*
Range: <2023.2
Arm/Arm Trusted Firmware
cpe:2.3:o:trustedfirmware:trusted_firmware-a:*:*:*:*:*:*:*:*
Range: <2.10.1
AMD/Zynq UltraScale+llm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.amd.com/en/resources/product-security/bulletin/amd-sb-8002nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000