high7.1
CVE-2021-26370
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to o…
Impact
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7763 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7713p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7713 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7663 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7643 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 75f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7543p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7543 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7513 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7453 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 74f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443p Firmware | before milanpi-sp3_1.0.0.4 |