CVE-2021-46771
- EPSS 0.1%
- Published 10.05.2022 19:15:09
- Last modified 21.11.2024 06:34:41
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
CVE-2021-26370
- EPSS 0.13%
- Published 10.05.2022 19:15:08
- Last modified 21.11.2024 05:56:13
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity...
CVE-2021-26353
- EPSS 0.13%
- Published 10.05.2022 19:15:08
- Last modified 21.11.2024 05:56:11
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
CVE-2021-26332
- EPSS 0.04%
- Published 10.05.2022 19:15:08
- Last modified 21.11.2024 05:56:07
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.
CVE-2021-26324
- EPSS 0.04%
- Published 10.05.2022 19:15:07
- Last modified 21.11.2024 05:56:06
A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.