cbcvebase.
CVE-2021-46769
published 2023-05-09

CVE-2021-46769: Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.

high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.

Affected

50 ranges· showing 25
VendorProductVersion rangeFixed in
amd2nd_gen_amd_epyc
amd3rd_gen_amd_epyc
amdepyc_7232p_firmware
amdepyc_7252_firmware
amdepyc_7262_firmware
amdepyc_7272_firmware
amdepyc_7282_firmware
amdepyc_72f3_firmware
amdepyc_7302_firmware
amdepyc_7302p_firmware
amdepyc_7313_firmware
amdepyc_7313p_firmware
amdepyc_7343_firmware
amdepyc_7352_firmware
amdepyc_7373x_firmware
amdepyc_73f3_firmware
amdepyc_7402_firmware
amdepyc_7402p_firmware
amdepyc_7413_firmware
amdepyc_7443_firmware
amdepyc_7443p_firmware
amdepyc_7452_firmware
amdepyc_7453_firmware
amdepyc_7473x_firmware
amdepyc_74f3_firmware