3.9
Faible
CVE-2021-46772 Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to…
Description
Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory corruption or denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD EPYC™ 7002 Series Processors | Versions non publiées | |
| AMD EPYC™ 7003 Series Processors | Versions non publiées | |
| AMD Ryzen™ 3000 Series Desktop Processors | Versions non publiées | |
| AMD Ryzen™ 5000 Series Desktop Processors | Versions non publiées | |
| AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | Versions non publiées | |
| AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics | Versions non publiées | |
| AMD Ryzen™ Threadripper™ 3000 Series Processors | Versions non publiées | |
| AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | Versions non publiées |
Afficher les 18 autres branches Masquer les 18 autres branches
Autres CVE de AMD EPYC™ 7002 Series Processors
Les 16 CVE de AMD EPYC™ 7002 Series Processors →
CVE-2025-54518
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to…
7.3
Élevée
CVE-2026-0432
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to…
8.5
Élevée
CVE-2025-48512
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)…
7.0
Élevée
CVE-2025-54502
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker…
7.1
Élevée