Description
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution environment (TEE) driver, potentially leading to loss of confidentiality.
Problem types
CWE-457 Use of Uninitialized Variable
Product status
Cezanne-FP6_1.0.1.0
Cezanne-FP6_1.0.1.0
ComboAM4v2PI_1.2.0.CA
ComboAM4v2PI_1.2.0.CA
PhoenixPI-FP8-FP7_1.1.0.2
Renoir-FP6_ 1.0.0.D
Rembrandt-FP7_1.0.0.A
Cezanne-FP6_1.0.1.0
MendocinoPI-FT6_1.0.0.6
EmbeddedPI-FP6_1.0.0.A
Embedded-PI_FP7r2 1009
AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)
AMD Software: PRO Edition 24.Q2 (24.10.20)
ROCm 6.4
ROCm 6.4
Contact your AMD Customer Engineering representative
References
www.amd.com/...es/product-security/bulletin/AMD-SB-4012.html
www.amd.com/...es/product-security/bulletin/AMD-SB-6018.html
www.amd.com/...es/product-security/bulletin/AMD-SB-5007.html