7.4
Élevée
CVE-2021-26356 A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially…
Description
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 | Versions non publiées | |
| AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4 | Versions non publiées | |
| 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT | Versions non publiées | |
| Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS | Versions non publiées | |
| Ryzen™ Threadripper™ PRO Processors “Chagall” WS | Versions non publiées | |
| 1st Gen AMD EPYC™ Processors | Versions non publiées | |
| 2nd Gen AMD EPYC™ Processors | Versions non publiées | |
| 3rd Gen AMD EPYC™ Processors | Versions non publiées |
Références
- www.amd.com www.amd.com
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
Les 11 CVE de Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 →
CVE-2023-20555
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an…
Non notée
CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access…
Non notée
CVE-2021-46794
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…
7.5
Élevée
CVE-2021-46773
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…
8.8
Élevée