Vulnerabilities > CVE-2021-46791 - Out-of-bounds Write vulnerability in AMD Milanpi Firmware

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
amd
CWE-787

Summary

Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.

Vulnerable Configurations

Part Description Count
OS
Amd
1
Hardware
Amd
1

Common Weakness Enumeration (CWE)