CVE-2021-26364

published 2022-05-11

CVE-2021-26364: Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.

Affected

45 ranges · showing 25

Vendor	Product	Version range	Fixed in
amd	epyc_7232p_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7252_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7262_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7272_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7282_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_72f3_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7302_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7302p_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7313p_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7343_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7352_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7373x_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_73f3_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7402_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7402p_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7413_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7443p_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7452_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7453_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7473x_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_74f3_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7502_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7502p_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d
amd	epyc_7513_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7532_firmware	< romepi-sp3_1.0.0.d	romepi-sp3_1.0.0.d

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 4.9 MEDIUM AV:L/AC:L/Au:N/C:N/I:N/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119