CVE-2021-26337

2021-11-1618:24:01

AMD

www.cve.org

dram validation

smu

sram dma

dma read

cve-2021-26337

AI Score

5.6

Confidence

High

EPSS

Percentile

12.6%

JSON

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests.

CNA Affected

[
  {
    "product": "Ryzen™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": "Athlon™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027