{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T03:06:29.636","vulnerabilities":[{"cve":{"id":"CVE-2023-31356","sourceIdentifier":"psirt@amd.com","published":"2024-08-13T17:15:21.733","lastModified":"2026-06-17T05:56:50.717","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Incomplete system memory cleanup in SEV firmware could\nallow a privileged attacker to corrupt guest private memory, potentially\nresulting in a loss of data integrity."},{"lang":"es","value":"Una limpieza incompleta de la memoria del sistema en el firmware SEV podría permitir que un atacante privilegiado corrompa la memoria privada del huésped, lo que podría provocar una pérdida de integridad de los datos."}],"affected":[{"source":"psirt@amd.com","affectedData":[{"vendor":"AMD","product":"AMD EPYC™ 7003 Processors","defaultStatus":"affected","versions":[{"version":"MilanPI 1.0.0.C","versionType":"PI","status":"unaffected"}]},{"vendor":"AMD","product":"AMD EPYC™ 9004 Processors","defaultStatus":"affected","versions":[{"version":"GenoaPI 1.0.0.B","status":"unaffected"}]},{"vendor":"AMD","product":"AMD EPYC™ Embedded 7003","defaultStatus":"affected","versions":[{"version":"\"EmbMilanPI-SP3  1.0.0.8\"","status":"unaffected"}]},{"vendor":"AMD","product":"AMD EPYC™ Embedded 9004","defaultStatus":"affected","versions":[{"version":"EmbGenoaPI-SP5 1.0.0.6","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@amd.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-14T15:46:30.501050Z","id":"CVE-2023-31356","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@amd.com","type":"Secondary","description":[{"lang":"en","value":"CWE-459"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-459"}]}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html","source":"psirt@amd.com"},{"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html","source":"psirt@amd.com"}]}}]}