2.8
Low
CVE-2023-31326 Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution…
Description
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 4000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 5000 Series Desktop Processors | Versions not published | |
| AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | Versions not published | |
| AMD Ryzen™ Embedded V2000 Series Processors | Versions not published |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Ryzen™ Embedded V3000 Series Processors | Versions not published | |
| AMD Radeon™ RX 7000 Series Graphics Products | Versions not published | |
| AMD Radeon™ PRO W7000 Series Graphics Products | Versions not published | |
| AMD Instinct™ MI210 | Versions not published | |
| AMD Instinct™ MI250 | Versions not published | |
| AMD Radeon™ PRO V710 Graphics Products | Versions not published |
References
- www.amd.com www.amd.com
- www.amd.com www.amd.com
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
The 46 CVEs of AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user…
7.1
High
CVE-2025-54518
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to…
7.3
High