CVE-2023-31326

Published: Sep 6, 2025

Modified: Sep 8, 2025

PUBLISHED

CVSS v3.1

2.8

LOW

Description

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.

Vendor	Product	Versions
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	unaffected `Cezanne-FP6_1.0.1.0`
AMD	AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics	unaffected `Cezanne-FP6_1.0.1.0`
AMD	AMD Ryzen™ 4000 Series Desktop Processors	unaffected `ComboAM4v2PI_1.2.0.CA`
AMD	AMD Ryzen™ 5000 Series Desktop Processors	unaffected `ComboAM4v2PI_1.2.0.CA`
AMD	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	unaffected `PhoenixPI-FP8-FP7_1.1.0.2`
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	unaffected `Renoir-FP6_ 1.0.0.D`
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	unaffected `Rembrandt-FP7_1.0.0.A`
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	unaffected `Cezanne-FP6_1.0.1.0`
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	unaffected `MendocinoPI-FT6_1.0.0.6`
AMD	AMD Ryzen™ Embedded V2000 Series Processors	unaffected `EmbeddedPI-FP6_1.0.0.A`
AMD	AMD Ryzen™ Embedded V3000 Series Processors	unaffected `Embedded-PI_FP7r2 1009`
AMD	AMD Radeon™ RX 7000 Series Graphics Products	unaffected `AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)`
AMD	AMD Radeon™ PRO W7000 Series Graphics Products	unaffected `AMD Software: PRO Edition 24.Q2 (24.10.20)`
AMD	AMD Instinct™ MI210	unaffected `ROCm 6.4`
AMD	AMD Instinct™ MI250	unaffected `ROCm 6.4`
AMD	AMD Radeon™ PRO V710 Graphics Products	unaffected `Contact your AMD Customer Engineering representative`