7.1
High
CVE-2021-46779 Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an…
Description
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 1st Gen EPYC | Versions not published | |
| 2nd Gen EPYC | Versions not published | |
| 3rd Gen EPYC | Versions not published |
Other CVEs of 1st Gen EPYC
The 5 CVEs of 1st Gen EPYC →
CVE-2023-20527
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds,…
6.5
Medium
CVE-2021-26403
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in…
6.5
Medium
CVE-2021-26398
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an…
7.8
High
CVE-2021-26316
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper…
7.8
High