VDB

CISA-2023-31326

CISA-2023-31326 PUBLISHED CVSS 2.8 LOW

Reported by AMD · Published September 6, 2025

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.

Risk Scores

CVSS 3.1
2.8
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected Products

VendorProductVersions
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsCezanne-FP6_1.0.1.0
AMDAMD Ryzen™ 7030 Series Mobile processors with Radeon™ GraphicsCezanne-FP6_1.0.1.0
AMDAMD Ryzen™ 4000 Series Desktop ProcessorsComboAM4v2PI_1.2.0.CA
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsComboAM4v2PI_1.2.0.CA
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsPhoenixPI-FP8-FP7_1.1.0.2
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsRenoir-FP6_ 1.0.0.D
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsRembrandt-FP7_1.0.0.A
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsCezanne-FP6_1.0.1.0
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsMendocinoPI-FT6_1.0.0.6
AMDAMD Ryzen™ Embedded V2000 Series ProcessorsEmbeddedPI-FP6_1.0.0.A
AMDAMD Ryzen™ Embedded V3000 Series ProcessorsEmbedded-PI_FP7r2 1009
AMDAMD Radeon™ RX 7000 Series Graphics ProductsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
AMDAMD Radeon™ PRO W7000 Series Graphics ProductsAMD Software: PRO Edition 24.Q2 (24.10.20)
AMDAMD Instinct™ MI210ROCm 6.4
AMDAMD Instinct™ MI250ROCm 6.4
AMDAMD Radeon™ PRO V710 Graphics ProductsContact your AMD Customer Engineering representative
AMDAMD Ryzen™ 7030 Series Mobile processors with Radeon™ GraphicsCezanne-FP6_1.0.1.0, Cezanne-FP6_1.0.1.0
AMDAMD Ryzen™ Embedded V2000 Series ProcessorsEmbeddedPI-FP6_1.0.0.A, EmbeddedPI-FP6_1.0.0.A
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsPhoenixPI-FP8-FP7_1.1.0.2, *
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsRembrandt-FP7_1.0.0.A, Rembrandt-FP7_1.0.0.A

…and 11 more

Timeline

  • Sep 6, 2025 CVE Published
  • Sep 8, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›