Description (CNA)
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | unaffected Cezanne-FP6_1.0.1.0 |
| AMD / AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics | unaffected Cezanne-FP6_1.0.1.0 |
| AMD / AMD Ryzen™ 4000 Series Desktop Processors | unaffected ComboAM4v2PI_1.2.0.CA |
| AMD / AMD Ryzen™ 5000 Series Desktop Processors | unaffected ComboAM4v2PI_1.2.0.CA |
| AMD / AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics | unaffected PhoenixPI-FP8-FP7_1.1.0.2 |
| AMD / AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | unaffected Renoir-FP6_ 1.0.0.D |
| AMD / AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | unaffected Rembrandt-FP7_1.0.0.A |
| AMD / AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | unaffected Cezanne-FP6_1.0.1.0 |
| AMD / AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | unaffected MendocinoPI-FT6_1.0.0.6 |
| AMD / AMD Ryzen™ Embedded V2000 Series Processors | unaffected EmbeddedPI-FP6_1.0.0.A |
| AMD / AMD Ryzen™ Embedded V3000 Series Processors | unaffected Embedded-PI_FP7r2 1009 |
| AMD / AMD Radeon™ RX 7000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01) |
| AMD / AMD Radeon™ PRO W7000 Series Graphics Products | unaffected AMD Software: PRO Edition 24.Q2 (24.10.20) |
| AMD / AMD Instinct™ MI210 | unaffected ROCm 6.4 |
| AMD / AMD Instinct™ MI250 | unaffected ROCm 6.4 |
| AMD / AMD Radeon™ PRO V710 Graphics Products | unaffected Contact your AMD Customer Engineering representative |
CWE
CWE-457
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
ADP enrichment
No English description supplied.
No references supplied.