CVE-2021-26364: amd epyc_7232p_firmware

Vulnerability summary

CVE-2021-26364 is a medium (CVSS 5.5) vulnerability in amd epyc_7232p_firmware. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.1% of scored vulnerabilities.

Timeline

1. 11-05-2022
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.