Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-46791 EUVD-2021-33447GHSA-669j-rxfq-2fvw

Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable bina…

Published Jan 10, 2023 · Updated Apr 9, 2025 · Assigned by AMD

Description

Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.

Affected products

VendorProductAffectedFixed
AMD 3rd Gen EPYC various —

Advisories 1

References