CVE-2023-31330

Published Sep 6, 2025 CVSS 3.1 · 2.5 Low EPSS < 1% KEV · Not listed
Description
An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-35641 An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Amd
Amd athlon
Amd athlon 3000
Amd ryzen 3000
Amd ryzen 4000
Amd ryzen 5000
Amd ryzen 6000
Amd ryzen 7000
Amd ryzen 7020
Vendors & Products Amd
Amd athlon
Amd athlon 3000
Amd ryzen 3000
Amd ryzen 4000
Amd ryzen 5000
Amd ryzen 6000
Amd ryzen 7000
Amd ryzen 7020
Type Values Removed Values Added
Description An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memory resulting in loss of confidentiality.
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 2.5, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Sep 8, 2025, 8:04 PM
Reserved
Apr 27, 2023, 3:25 PM
Status
Deferred
Published
Sep 6, 2025, 5:15 PM
Modified
Jun 17, 2026, 5:56 AM