Skip to content
fr Sign in
Not rated

CVE-2021-26315 When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW,…

Description

When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.

Affected products and versions

Product Affected versions Fixed in
3rd Gen AMD EPYC™ Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of 3rd Gen AMD EPYC™

The 28 CVEs of 3rd Gen AMD EPYC™ →
CVE-2023-20520 Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a… 9.8 Critical CVE-2023-20524 An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an… 7.5 High CVE-2022-23818 Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP… 7.5 High CVE-2021-46775 Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,… 6.8 Medium
Track this CVE