CVE-2021-46795

Description

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.

Affected Platforms

Weakness Type

CWE-367, CWE-367

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031