2 lines
2.1 KiB
JSON
2 lines
2.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"AMD Instinct™ MI300X","vendor":"AMD","versions":[{"status":"unaffected","version":"ROCm 6.3"}]},{"defaultStatus":"affected","product":"AMD Instinct™ MI325X","vendor":"AMD","versions":[{"status":"unaffected","version":"ROCm 6.3"}]}],"source":"psirt@amd.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service."},{"lang":"es","value":"Saneamiento insuficiente de parámetros en el controlador TEE SOC podría permitir a un atacante emitir un DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART malformado y causar una lectura o escritura más allá del final de los arrays asignados, lo que podría resultar en una pérdida de integridad de la plataforma o denegación de servicio."}],"id":"CVE-2025-0034","lastModified":"2026-10-18T21:10:00.120","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"exploitabilityScore":0.5,"impactScore":4.2,"source":"psirt@amd.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0034","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-09-08T14:35:24.000031Z","version":"2.0.3"}}]},"published":"2025-09-06T19:15:38.373","references":[{"source":"psirt@amd.com","url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html"}],"sourceIdentifier":"psirt@amd.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"psirt@amd.com","type":"Secondary"}]}
|