NetSight
high7.8

CVE-2021-26384

A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to ou…

Impact

A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.

Affected products

VendorProductAffected versions
AmdRyzen 7 5700g Firmware
before comboam4_v2_pi_1.2.0.6c
AmdRyzen 7 5700ge Firmware
before comboam4_v2_pi_1.2.0.6c
AmdRyzen 5 5600g Firmware
before comboam4_v2_pi_1.2.0.6c
AmdRyzen 5 5600ge Firmware
before comboam4_v2_pi_1.2.0.6c
AmdRyzen 3 5300g Firmware
before comboam4_v2_pi_1.2.0.6c
AmdRyzen 3 5300ge Firmware
before comboam4_v2_pi_1.2.0.6c
AmdRyzen 9 5980hx Firmware
before cezannepi-fp6_1.0.0.9
AmdRyzen 9 5980hs Firmware
before cezannepi-fp6_1.0.0.9
AmdRyzen 7 5825u Firmware
before cezannepi-fp6_1.0.0.9
AmdRyzen 9 5900hx Firmware
before cezannepi-fp6_1.0.0.9
AmdRyzen 9 5900hs Firmware
before cezannepi-fp6_1.0.0.9
AmdRyzen 7 5825c Firmware
before cezannepi-fp6_1.0.0.9

Weakness classification

References