Skip to content
CVE PROGRAM SOURCE RECORD2.5 Low

CVE-2023-31330

An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality.

Description

An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ Threadripper™ 3000 Processors

Default version status: affected

  • CastlePeakPI-SP3r3 1.0.0.Cunaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Default version status: affected

  • chagallwspi_swrx8_1.0.0.9unaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

Default version status: affected

  • CastlePeakWSPI-sWRX8 1.0.0.Eunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

Default version status: affected

  • chagallwspi_swrx8_1.0.0.9unaffected

AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors

Default version status: affected

  • StrormPeakPI-SP6_1.0.0.1eunaffected
  • StrormPeakPI-SP6_1.1.0.0cunaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Picasso-FP5_1.0.1.1unaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4PI_1.0.0.Eunaffected

AMD AMD Ryzen™ 8000 Series Desktop Processors

Default version status: affected

  • ComboAM5 1.1.0.2unaffected

AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PhoenixPI-FP8-FP7_1.1.0.1bunaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Renoir-FP6_1.0.0.Eaunaffected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • Rembrandt-FP7_1.0.0.Aunaffected

AMD AMD Ryzen™ Threadripper™ 7000 Processors

Default version status: affected

  • StrormPeakPI-SP6_1.1.0.0cunaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6_1.0.0.6unaffected

AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • DragonRangeFL1PI 1.0.0.3Cunaffected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Default version status: affected

  • Rembrandt-FP7_1.0.0.Aunaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Cezanne-FP6_1.0.1.1aunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Cezanne-FP6_1.0.1.1aunaffected

AMD AMD Ryzen™ 7000 Series Desktop Processors

Default version status: affected

  • ComboAM5 1.1.0.2unaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI_1.2.0.CAunaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Picasso-FP5_1.0.1.1unaffected

References