Not rated
CVE-2021-26408 Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration…
Description
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 1st Gen AMD EPYC™ | Versions not published | |
| 2nd Gen AMD EPYC™ | Versions not published |
Other CVEs of 1st Gen AMD EPYC™
The 9 CVEs of 1st Gen AMD EPYC™ →
CVE-2023-20520
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…
9.8
Critical
CVE-2021-26330
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources
Not rated
CVE-2020-12954
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections,…
Not rated
CVE-2021-26331
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox…
Not rated