Riskcovery

CVE-2023-31326

State
Published
Severity
2.8 Low
Published
Sep 6, 2025
Updated
Sep 8, 2025
Reserved
Apr 27, 2023

Read the record on cve.org

Description

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.

Scores

CVSSScoreVectorSource
3.12.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:NAMD

Weaknesses

  • CWE-457 Use of Uninitialized Variable

Affected Products

ProductVersions
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Cezanne-FP6_1.0.1.0Not affected
AMD Ryzen™ 7030 Series Mobile processors with Radeon™ GraphicsAMD
  • Cezanne-FP6_1.0.1.0Not affected
AMD Ryzen™ 4000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI_1.2.0.CANot affected
AMD Ryzen™ 5000 Series Desktop ProcessorsAMD
  • ComboAM4v2PI_1.2.0.CANot affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD
  • PhoenixPI-FP8-FP7_1.1.0.2Not affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Renoir-FP6_ 1.0.0.DNot affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD
  • Rembrandt-FP7_1.0.0.ANot affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Cezanne-FP6_1.0.1.0Not affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • MendocinoPI-FT6_1.0.0.6Not affected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD
  • EmbeddedPI-FP6_1.0.0.ANot affected
AMD Ryzen™ Embedded V3000 Series ProcessorsAMD
  • Embedded-PI_FP7r2 1009Not affected
AMD Radeon™ RX 7000 Series Graphics ProductsAMD
  • AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)Not affected
AMD Radeon™ PRO W7000 Series Graphics ProductsAMD
  • AMD Software: PRO Edition 24.Q2 (24.10.20)Not affected
AMD Instinct™ MI210AMD
  • ROCm 6.4Not affected
AMD Instinct™ MI250AMD
  • ROCm 6.4Not affected
AMD Radeon™ PRO V710 Graphics ProductsAMD
  • Contact your AMD Customer Engineering representativeNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.