Improper input validation in AMD Zynq™ UltraScale+™ MPSoC/RFSoC
Priority LOW 25CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00158 4th percentileScored 2026-11-07
Fix Fixed Zynq™ UltraScale+™ MPSoC/RFSoC (AMD): 2023.2
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | Zynq™ UltraScale+™ MPSoC/RFSoC | before 2023.2 | 2023.2 | Patch available | CNA |
- Zynq™ UltraScale+™ MPSoC/RFSoC VendorAMD Affected before 2023.2 Fixed in 2023.2 Patch available CNA
CPE configurations NVD · 43
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:trusted_firmware-a:*:*:*:*:*:*:*:* | before 2023.2 | Vulnerable | AMD |
| cpe:2.3:o:trustedfirmware:trusted_firmware-a:*:*:*:*:*:*:*:* | before 2.10.1 | Vulnerable | OP-TEE |
| cpe:2.3:h:amd:zu11eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu15eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu17eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu19eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu1cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu1eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu21dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu25dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:trusted_firmware-a:*:*:*:*:*:*:*:* Versions before 2023.2 Vulnerable ·AMD
- cpe:2.3:o:trustedfirmware:trusted_firmware-a:*:*:*:*:*:*:*:* Versions before 2.10.1 Vulnerable ·OP-TEE
- cpe:2.3:h:amd:zu11eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu15eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu17eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu19eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu1cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu1eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu21dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu25dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 33 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:amd:zu27dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu28dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu29dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu2cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu2eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu39dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu3cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu3eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu3tcg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu3teg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu42dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu43dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu46dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu47dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu48dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu49dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu4cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu4eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu4ev:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu5cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu5eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu5ev:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu63dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu64dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu65dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu67dr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu6cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu6eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu7cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu7eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu7ev:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu9cg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:zu9eg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:h:amd:zu27dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu28dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu29dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu2cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu2eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu39dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu3cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu3eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu3tcg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu3teg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu42dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu43dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu46dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu47dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu48dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu49dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu4cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu4eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu4ev:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu5cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu5eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu5ev:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu63dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu64dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu65dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu67dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu6cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu6eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu7cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu7eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu7ev:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu9cg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:zu9eg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
- Fix · CNA Zynq™ UltraScale+™ MPSoC/RFSoC (AMD) Fixed in 2023.2
Timeline
- 2026-10-02 Threatist record created from CVE-2023-31339
- 2026-10-03 Alias added: GHSA-xqmw-9249-4m7x
Sources
- CVE-2023-31339 · CVE Program
- CVE-2023-31339 · NVD
- FIRST EPSS
- GHSA-xqmw-9249-4m7x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences