1.9
Low
CVE-2021-26345 Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an…
Description
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 2nd Gen AMD EPYC™ Processors | Versions not published | |
| 3rd Gen AMD EPYC™ Processors | Versions not published | |
| 4th Gen AMD EPYC™ Processors | Versions not published | |
| AMD EPYC™ Embedded 7002 | Versions not published | |
| AMD EPYC™ Embedded 7003 | Versions not published |
Other CVEs of 2nd Gen AMD EPYC™ Processors
The 19 CVEs of 2nd Gen AMD EPYC™ Processors →
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2023-31315
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…
7.5
High
CVE-2022-23829
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to…
8.2
High
CVE-2023-20587
Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially…
7.1
High