5.5
Medium
CVE-2021-46768 Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP…
Description
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 2nd Gen EPYC | Versions not published | |
| 3rd Gen EPYC | Versions not published |
Other CVEs of 2nd Gen EPYC
The 14 CVEs of 2nd Gen EPYC →
CVE-2023-20532
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in…
5.3
Medium
CVE-2023-20531
Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid…
7.5
High
CVE-2023-20529
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value…
7.5
High
CVE-2023-20528
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C…
2.4
Low