Non notée
CVE-2021-26315 When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW,…
Description
When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 3rd Gen AMD EPYC™ | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de 3rd Gen AMD EPYC™
Les 28 CVE de 3rd Gen AMD EPYC™ →
CVE-2023-20520
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…
9.8
Critique
CVE-2023-20524
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an…
7.5
Élevée
CVE-2022-23818
Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP…
7.5
Élevée
CVE-2021-46775
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,…
6.8
Moyenne