NetSight
medium5.5

CVE-2021-26404

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.

Impact

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.

Affected products

VendorProductAffected versions
AmdEpyc 7003 Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7313 Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7313p Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7343 Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7373x Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 73f3 Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7413 Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7443 Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 7473x Firmware
before milanpi-sp3_1.0.0.9
AmdEpyc 74f3 Firmware
before milanpi-sp3_1.0.0.9

Weakness classification

References