CVE-2021-26335
—CVSS 3.1
7.8 high
EPSS
<1%p22
Published
()
Modified
Description
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.
- Vendors
- amd
- Products
- epyc 7003 firmware, epyc 7002 firmware, epyc 7001 firmware, epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware, epyc 7343 firmware, epyc 73f3 firmware, epyc 7413 firmware, epyc 7443 firmware, epyc 7443p firmware, epyc 7453 firmware
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.