1. Home
  2. CVE Database
  3. CVE-2021-26364
MEDIUM · 5.5

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential...

Vulnerability Description

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
AmdEpyc 7232P Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7232P-
AmdEpyc 7302P Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7302P-
AmdEpyc 7402P Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7402P-
AmdEpyc 7502P Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7502P-
AmdEpyc 7702P Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7702P-
AmdEpyc 7252 Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7252-
AmdEpyc 7262 Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7262-
AmdEpyc 7272 Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7272-
AmdEpyc 7282 Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7282-
AmdEpyc 7302 Firmware< romepi-sp3_1.0.0.d
AmdEpyc 7302-

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2021-26364?

CVE-2021-26364 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential...

How severe is CVE-2021-26364?

CVE-2021-26364 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-26364?

Check the references section above for vendor advisories and patch information. Affected products include: Amd Epyc 7232P Firmware, Amd Epyc 7232P, Amd Epyc 7302P Firmware, Amd Epyc 7302P, Amd Epyc 7402P Firmware.