CVE-2023-31331

{"id": "CVE-2023-31331", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@amd.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.0, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 2.5, "exploitabilityScore": 0.5}]}, "published": "2025-02-11T22:15:26.643", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html", "source": "psirt@amd.com"}, {"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html", "source": "psirt@amd.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@amd.com", "description": [{"lang": "en", "value": "CWE-1284"}]}], "descriptions": [{"lang": "en", "value": "Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of integrity or availability."}, {"lang": "es", "value": "Un control de acceso inadecuado en el firmware DRTM podr\u00eda permitir que un atacante privilegiado realice m\u00faltiples inicializaciones de controladores, lo que genera una corrupci\u00f3n de la memoria de la pila que potencialmente podr\u00eda conducir a la p\u00e9rdida de integridad o disponibilidad."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "psirt@amd.com"}