CVE-2021-26346

2023-01-1019:50:24

AMD

www.cve.org

asp bootloader

integer overflow

l2 directory table

spi flash

denial of service

EPSS

Percentile

12.7%

JSON

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen 5000 Series",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031

EPSS

Percentile

12.7%

JSON

Related for CVELIST:CVE-2021-26346