high7.8
CVE-2021-46771
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user …
Impact
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7763 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7713p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7713 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7663 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7643 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 75f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7543p Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7543 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7513 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7453 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 74f3 Firmware | before milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443p Firmware | before milanpi-sp3_1.0.0.4 |