CVE-2021-46769

Summary

Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001

• ←Previous
• Next→