CVE-2023-31326
BaseFortify
Publication date: 2025-09-06
Last updated on: 2025-09-08
Assigner: Advanced Micro Devices Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| amd | athlon | * |
| amd | radeon_pro_w7000 | * |
| amd | client_processor | * |
| amd | ryzen | * |
| amd | embedded_processor | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-457 | The code uses a variable that has not been initialized, leading to unpredictable or unintended results. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the use of an uninitialized variable in the ASP, which could allow an attacker to access leftover data from a trusted execution environment (TEE) driver. This means that sensitive information that should be protected within the TEE might be exposed due to improper handling of memory or variables.
How can this vulnerability impact me? :
The vulnerability can lead to loss of confidentiality by allowing an attacker to access sensitive data that remains in memory due to the uninitialized variable. This could expose private or protected information that was expected to be secure within the trusted execution environment.