CVE-2020-12944 Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution

Description

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

Affected products and versions

Product	Affected versions	Fixed in
Ryzen™ Series	Versions not published
Athlon™ Series	Versions not published

Other CVEs of Ryzen™ Series

The 27 CVEs of Ryzen™ Series →

CVE-2021-26384 A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info… Not rated CVE-2021-26382 An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor… Not rated CVE-2021-26363 A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to… Not rated CVE-2021-26386 A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2… Not rated