high7.2
CVE-2021-26344
An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image,…
Impact
An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially modify the APCB block resulting in arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7203 Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7203p Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 72f3 Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7303 Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7303p Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7313 Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7313p Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7343 Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 73f3 Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7373x Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7413 Firmware | before milanpi_1.0.0.5 |
| Amd | Epyc 7443 Firmware | before milanpi_1.0.0.5 |