Aller au contenu
en Se connecter
Non notée

CVE-2021-26347 Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an…

Description

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

Produits et versions touchés

Produit Versions touchées Corrigé en
Ryzen 5000 Series Versions non publiées
Ryzen 5000 Series Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Ryzen 5000 Series

Les 4 CVE de Ryzen 5000 Series →
CVE-2021-46795 A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the… 4.7 Moyenne CVE-2021-26346 Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an… 5.5 Moyenne CVE-2021-26316 Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper… 7.8 Élevée
Suivre cette CVE