CVE-2021-26379
—CVSS 3.1
9.8 critical
EPSS
<1%p50
Published
()
Modified
Description
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.
- Vendors
- amd
- Products
- epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware, epyc 7343 firmware, epyc 7373x firmware, epyc 73f3 firmware, epyc 7413 firmware, epyc 7443 firmware, epyc 7443p firmware, epyc 7453 firmware, epyc 7473x firmware, epyc 74f3 firmware
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.