Vulnerabilities > AMD > Epyc 7401 Firmware > naplespi.1.0.0.j

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2021-46774 Unspecified vulnerability in AMD products
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
network
low complexity
amd
7.5
2023-05-09 CVE-2021-46756 Improper Input Validation vulnerability in AMD products
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.
network
low complexity
amd CWE-20
critical
9.1