CVSS: 7.4EPSS: 0%CPEs: 196EXPL: 0CVE-2021-26356
https://notcve.org/view.php?id=CVE-2021-26356
09 May 2023 — A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure. A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 5.5EPSS: 0%CPEs: 304EXPL: 0CVE-2021-26354
https://notcve.org/view.php?id=CVE-2021-26354
09 May 2023 — Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity. Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.1EPSS: 0%CPEs: 46EXPL: 0CVE-2021-26397
https://notcve.org/view.php?id=CVE-2021-26397
09 May 2023 — Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability. Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 •
CVSS: 10.0EPSS: 0%CPEs: 96EXPL: 0CVE-2021-26379
https://notcve.org/view.php?id=CVE-2021-26379
09 May 2023 — Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation. Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 •
CVSS: 5.5EPSS: 0%CPEs: 46EXPL: 0CVE-2021-26404
https://notcve.org/view.php?id=CVE-2021-26404
10 Jan 2023 — Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure. La validación de entrada y la verificación de los límites inadecuadas en el firmware SEV pueden perder bytes del búfer temporal, lo que puede provocar una posible divulgación de información. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 320EXPL: 0CVE-2021-26388
https://notcve.org/view.php?id=CVE-2021-26388
11 May 2022 — Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service. Una comprobación inapropiada del directorio de la BIOS puede permitir que las búsquedas lean más allá de la copia de la tabla del directorio en la RAM, exponiendo contenidos de memoria fuera de límites, resultando en una potencial denegación de servicio • https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 248EXPL: 0CVE-2021-26376
https://notcve.org/view.php?id=CVE-2021-26376
11 May 2022 — Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service. Unas comprobaciones insuficientes en la FeatureConfig de la Unidad de Administración del Sistema (SMU) pueden resultar en una nueva habilitación de las funciones que podría resultar en una denegación de recursos y/o una denegación de servicio • https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 •
CVSS: 5.5EPSS: 0%CPEs: 274EXPL: 0CVE-2021-26373
https://notcve.org/view.php?id=CVE-2021-26373
11 May 2022 — Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service. Unas comprobaciones de límites insuficientes en la Unidad de Administración del Sistema (SMU) pueden resultar en un mal funcionamiento de la tensión del sistema que podría resultar en una denegación de recursos y/o posiblemente a la denegación de servicio • https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 46EXPL: 0CVE-2021-26348
https://notcve.org/view.php?id=CVE-2021-26348
11 May 2022 — Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity. Un fallo en el vaciado del Translation Lookaside Buffer (TLB) de la Unidad de Administración de Memoria de E/S (IOMMU) puede conllevar a que un dispositivo de E/S escriba en una memoria a la que no debería poder acceder, lo que podría resultar en una pérdida de integridad • https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028 •
CVSS: 5.5EPSS: 0%CPEs: 94EXPL: 0CVE-2021-26364
https://notcve.org/view.php?id=CVE-2021-26364
11 May 2022 — Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service. Una comprobación de límites insuficiente en un registro del buzón de la SMU podría permitir a un atacante leer potencialmente fuera del rango de direcciones de la SRAM, lo que podría resultar en un manejo de excepciones conllevando a una potencial denegación de servicio • https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •