cbcvebase.
CVE-2021-26347
published 2022-05-11

CVE-2021-26347: Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory…

medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

Affected

50 ranges· showing 25
VendorProductVersion rangeFixed in
amdepyc_7002_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7232p_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7252_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7262_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7272_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7282_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_72f3_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7302_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7302p_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7313_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7313p_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7343_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7352_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7373x_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_73f3_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7402_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7402p_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7413_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7443_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7443p_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7452_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d
amdepyc_7453_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7473x_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_74f3_firmware< milanpi-sp3_1.0.0.7milanpi-sp3_1.0.0.7
amdepyc_7502_firmware< romepi-sp3_1.0.0.dromepi-sp3_1.0.0.d