high8.8
CVE-2021-46769
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.
Impact
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 72f3 Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7313 Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7313p Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7343 Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7373x Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 73f3 Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7413 Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7443 Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7443p Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7453 Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 7473x Firmware | Version milanpi_1.0.0.9 |
| Amd | Epyc 74f3 Firmware | Version milanpi_1.0.0.9 |