9.8
Critique
CVE-2021-46760 A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an…
Description
A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentially lead to an attacker leaking sensitive information or achieving code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT | Versions non publiées | |
| Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
Les 11 CVE de 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT →
CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access…
Non notée
CVE-2021-46794
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…
7.5
Élevée
CVE-2021-46773
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…
8.8
Élevée
CVE-2021-46756
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an…
9.1
Critique