← Database

CVE-2021-46756

CRITICAL CVSS: 9.1 Published: 2023-05-09 Modified: 2026-06-17

Description

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

Affected Platforms

Amd Epyc 7551PAmd Epyc 7642Amd Epyc 7401 FirmwareAmd Epyc 74F3Amd Epyc 7502PAmd Epyc 7313 FirmwareAmd Epyc 7302PAmd Epyc 7702PAmd Epyc 7F52Amd Epyc 7473X Firmware

Weakness Type

CWE-20

References