5.5
Moyenne
CVE-2021-46791 Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously…
Description
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 3rd Gen EPYC | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de 3rd Gen EPYC
Les 26 CVE de 3rd Gen EPYC →
CVE-2023-20532
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in…
5.3
Moyenne
CVE-2023-20531
Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid…
7.5
Élevée
CVE-2023-20530
Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially…
7.5
Élevée
CVE-2023-20529
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value…
7.5
Élevée