CVE-2023-31339
MEDIUMDescription
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
Is your site exposed to CVE-2023-31339?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| amd | trusted_firmware-a |
| arm | trusted_firmware-a |
| amd | zu11eg |
| amd | zu15eg |
| amd | zu17eg |
| amd | zu19eg |
| amd | zu1cg |
| amd | zu1eg |
| amd | zu21dr |
| amd | zu25dr |
| amd | zu27dr |
| amd | zu28dr |
| amd | zu29dr |
| amd | zu2cg |
| amd | zu2eg |
| amd | zu39dr |
| amd | zu3cg |
| amd | zu3eg |
| amd | zu3tcg |
| amd | zu3teg |
| amd | zu42dr |
| amd | zu43dr |
| amd | zu46dr |
| amd | zu47dr |
| amd | zu48dr |
| amd | zu49dr |
| amd | zu4cg |
| amd | zu4eg |
| amd | zu4ev |
| amd | zu5cg |
| amd | zu5eg |
| amd | zu5ev |
| amd | zu63dr |
| amd | zu64dr |
| amd | zu65dr |
| amd | zu67dr |
| amd | zu6cg |
| amd | zu6eg |
| amd | zu7cg |
| amd | zu7eg |
| amd | zu7ev |
| amd | zu9cg |
| amd | zu9eg |
References
Frequently Asked Questions
What is CVE-2023-31339? +
How severe is CVE-2023-31339? +
What products are affected by CVE-2023-31339? +
How do I check if I'm vulnerable to CVE-2023-31339? +
Related Vulnerabilities
Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is …
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to …
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in …
n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail …
A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured …
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle …