CVE-2021-26370
Assigner: AMD
Published: 2022-05-06T00:00:00
State: PUBLISHED
affected: product: 2nd Gen AMD EPYC™
vendor: AMD
versions: lessThan: RomePI-SP3_1.0.0.C
status: affected
version: unspecified
versionType: custom
product: 3rd Gen AMD EPYC™
vendor: AMD
versions: lessThan: MilanPI-SP3_1.0.0.4
status: affected
version: unspecified
versionType: custom
datePublic: 2022-05-06T00:00:00
descriptions: value: Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
source: advisory: AMD-SB-1021
discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9