Unscored CVE-2021-46771 EUVD-2021-33427GHSA-qfcc-w88q-7m85

Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by…

Published May 10, 2022 · Updated Sep 17, 2024 · Assigned by AMD

Description

Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.

Affected products

Vendor	Product	Affected	Fixed
AMD	3rd Gen AMD EPYC™	unspecified – < MilanPI-SP3_1.0.0.4	MilanPI-SP3_1.0.0.4

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021