CVE-2021-46769
—CVSS 3.1
8.8 high
EPSS
<1%p54
Published
()
Modified
Description
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.
- Vendors
- amd
- Products
- epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware, epyc 7343 firmware, epyc 7373x firmware, epyc 73f3 firmware, epyc 7413 firmware, epyc 7443 firmware, epyc 7443p firmware, epyc 7453 firmware, epyc 7473x firmware, epyc 74f3 firmware
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.