CRITICAL🇵🇱 Wersja polska

CVE-2021-46756

CVSS 9.1v3.1pub. 2023-05-09upd. 2025-01-28

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Amd Epyc 7232p

    HW
    Amd
    all versions

  • Amd Epyc 7232p Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 7251

    HW
    Amd
    all versions

  • Amd Epyc 7251 Firmware

    OS
    Amd
    naplespi_1.0.0.j

  • Amd Epyc 7252

    HW
    Amd
    all versions

  • Amd Epyc 7252 Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 7261

    HW
    Amd
    all versions

  • Amd Epyc 7261 Firmware

    OS
    Amd
    naplespi_1.0.0.j

  • Amd Epyc 7262

    HW
    Amd
    all versions

  • Amd Epyc 7262 Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 7272

    HW
    Amd
    all versions

  • Amd Epyc 7272 Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 7282

    HW
    Amd
    all versions

  • Amd Epyc 7282 Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 72f3

    HW
    Amd
    all versions

  • Amd Epyc 72f3 Firmware

    OS
    Amd
    milanpi_1.0.0.9

  • Amd Epyc 7302

    HW
    Amd
    all versions

  • Amd Epyc 7302 Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 7302p

    HW
    Amd
    all versions

  • Amd Epyc 7302p Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 7313

    HW
    Amd
    all versions

  • Amd Epyc 7313 Firmware

    OS
    Amd
    milanpi_1.0.0.9

  • Amd Epyc 7313p

    HW
    Amd
    all versions

  • Amd Epyc 7313p Firmware

    OS
    Amd
    milanpi_1.0.0.9

  • Amd Epyc 7343

    HW
    Amd
    all versions

  • Amd Epyc 7343 Firmware

    OS
    Amd
    milanpi_1.0.0.9

  • Amd Epyc 7352

    HW
    Amd
    all versions

  • Amd Epyc 7352 Firmware

    OS
    Amd
    romepi_1.0.0.e

  • Amd Epyc 7373x

    HW
    Amd
    all versions

  • Amd Epyc 7373x Firmware

    OS
    Amd
    milanpi_1.0.0.9
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2023-20520CRITICAL9.8PL ✓same product

Stack-based buffer overflow w ASP Bootloader procesorów AMD EPYC

CVE-2021-26379CRITICAL9.8PL ✓same product

AMD EPYC SMU — nieprawidłowa walidacja danych mailbox prowadzi do korupcji SMRAM

CVE-2021-26344HIGH7.2same product

An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker ...

CVE-2023-20578HIGH7.5same product

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS...

CVE-2024-21980HIGH7.9same product

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially ove...