← Database

CVE-2021-46769

HIGH CVSS: 8.8 Published: 2023-05-09 Modified: 2026-06-17

Description

Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.

Affected Platforms

Amd Epyc 7642Amd Epyc 74F3Amd Epyc 7502PAmd Epyc 7313 FirmwareAmd Epyc 7302PAmd Epyc 7702PAmd Epyc 7F52Amd Epyc 7473X FirmwareAmd Epyc 7502 FirmwareAmd Epyc 7742 Firmware

Weakness Type

CWE-20

References