CVE-2021-46771
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - psirt@amd.com
- Published
- 2022-05-10
- Last modified
- 2024-09-17
- Weaknesses
- CWE-20
Affected products
- 3rd Gen Amd Epyc (Amd)
- Epyc 72f3 Firmware (Amd)
- Epyc 7313 Firmware (Amd)
- Epyc 7313p Firmware (Amd)
- Epyc 7343 Firmware (Amd)
- Epyc 7373x Firmware (Amd)
- Epyc 73f3 Firmware (Amd)
- Epyc 7413 Firmware (Amd)
- Epyc 7443 Firmware (Amd)
- Epyc 7443p Firmware (Amd)
- Epyc 7453 Firmware (Amd)
- Epyc 7473x Firmware (Amd)
- Epyc 74f3 Firmware (Amd)
- Epyc 7513 Firmware (Amd)
- Epyc 7543 Firmware (Amd)
- Epyc 7543p Firmware (Amd)
- Epyc 7573x Firmware (Amd)
- Epyc 75f3 Firmware (Amd)
- Epyc 7643 Firmware (Amd)
- Epyc 7663 Firmware (Amd)
- Epyc 7713 Firmware (Amd)
- Epyc 7713p Firmware (Amd)
- Epyc 7763 Firmware (Amd)
- Epyc 7773x Firmware (Amd)
References
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
