7.1
High
CVE-2021-26397 Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory…
Description
Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 3rd Gen AMD EPYC™ | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of 3rd Gen AMD EPYC™
The 28 CVEs of 3rd Gen AMD EPYC™ →
CVE-2023-20520
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…
9.8
Critical
CVE-2023-20524
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an…
7.5
High
CVE-2022-23818
Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP…
7.5
High
CVE-2021-46775
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,…
6.8
Medium