PT-2026-7587 · Amd · Amd Secure Processor

Publicado 2026-02-11 · Atualizado 2026-03-05 · CVE-2023-31324

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AMD Secure Processor (ASP) (affected versions not specified)

Description A Time-of-check time-of-use (TOCTOU) race condition exists in the AMD Secure Processor (ASP). This condition could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands during processing. Successful exploitation may lead to a loss of confidentiality, integrity, or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

Identificadores relacionados

CVE-2023-31324

Produtos afetados

Amd Secure Processor

Referências · 7

• https://amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2021608555871093199 · Publicação no Twitter
• https://t.me/CVEtracker/44413 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2021659674706080117 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-31324 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-31324 · Aviso do Fabricante
• https://t.me/cveNotify/154358 · Publicação no Telegram