7.8
Élevée
CVE-2021-26316 Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper…
Description
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ryzen 5000 Series | Versions non publiées | |
| Ryzen 2000 Series | Versions non publiées | |
| Ryzen 3000 Series | Versions non publiées | |
| 1st Gen EPYC | Versions non publiées | |
| 2nd Gen EPYC | Versions non publiées | |
| 3rd Gen EPYC | Versions non publiées |
Références
- www.amd.com www.amd.com
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ryzen 5000 Series
Les 4 CVE de Ryzen 5000 Series →
CVE-2021-46795
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the…
4.7
Moyenne
CVE-2021-26346
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an…
5.5
Moyenne
CVE-2021-26347
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an…
Non notée