Not rated
CVE-2021-46771 Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to…
Description
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 3rd Gen AMD EPYC™ | Versions not published |
Other CVEs of 3rd Gen AMD EPYC™
The 28 CVEs of 3rd Gen AMD EPYC™ →
CVE-2023-20520
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…
9.8
Critical
CVE-2023-20524
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an…
7.5
High
CVE-2022-23818
Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP…
7.5
High
CVE-2021-46775
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,…
6.8
Medium