CWE
20 125
Advisory Published
Updated

CVE-2023-31339: Input Validation

First published: Tue Aug 13 2024(Updated: )

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.

Credit: psirt@amd.com

Affected SoftwareAffected VersionHow to fix
All of
Any of
Amd Trusted Firmware-a<2023.2
ARM Trusted Firmware-A<2.10.1
Any of
Amd Zu11eg
Amd Zu15eg
Amd Zu17eg
Amd Zu19eg
Amd Zu1cg
Amd Zu1eg
Amd Zu21dr
Amd Zu25dr
Amd Zu27dr
Amd Zu28dr
Amd Zu29dr
Amd Zu2cg
Amd Zu2eg
Amd Zu39dr
Amd Zu3cg
Amd Zu3eg
Amd Zu3tcg
Amd Zu3teg
Amd Zu42dr
Amd Zu43dr
Amd Zu46dr
Amd Zu47dr
Amd Zu48dr
Amd Zu49dr
Amd Zu4cg
Amd Zu4eg
Amd Zu4ev
Amd Zu5cg
Amd Zu5eg
Amd Zu5ev
Amd Zu63dr
Amd Zu64dr
Amd Zu65dr
Amd Zu67dr
Amd Zu6cg
Amd Zu6eg
Amd Zu7cg
Amd Zu7eg
Amd Zu7ev
Amd Zu9cg
Amd Zu9eg

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203