CVSS: 8.8EPSS: 0%CPEs: 96EXPL: 0CVE-2021-46769
https://notcve.org/view.php?id=CVE-2021-46769
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 96EXPL: 0CVE-2021-46764
https://notcve.org/view.php?id=CVE-2021-46764
Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 96EXPL: 0CVE-2021-46763
https://notcve.org/view.php?id=CVE-2021-46763
Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to a loss of integrity. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 • CWE-787: Out-of-bounds Write •
CVSS: 9.1EPSS: 0%CPEs: 96EXPL: 0CVE-2021-46762
https://notcve.org/view.php?id=CVE-2021-46762
Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 96EXPL: 0CVE-2021-26379
https://notcve.org/view.php?id=CVE-2021-26379
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation. • https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 •