high7.8
CVE-2021-26316
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (…
Impact
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7h12 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7f72 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7f52 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7f32 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7742 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7702p Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7702 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7662 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7642 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7552 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7542 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7532 Firmware | before romepi_1.0.0.d |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032