high7.8
CVE-2021-26335
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to s…
Impact
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7003 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7002 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7001 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 72f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7343 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 73f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7413 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7453 Firmware | before milanpi-sp3_1.0.0.4 |