Skip to content
fr Sign in
Not rated

CVE-2021-26384 A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info…

Description

A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.

Affected products and versions

Product Affected versions Fixed in
Ryzen™ Series Versions not published
Athlon™ Series Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Ryzen™ Series

The 27 CVEs of Ryzen™ Series →
CVE-2021-26382 An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor… Not rated CVE-2021-26363 A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to… Not rated CVE-2021-26386 A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2… Not rated CVE-2021-26317 Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in… Not rated
Track this CVE