Vulnerabilities > AMD > Epyc 7473X Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-05-10 CVE-2021-26324 Unspecified vulnerability in AMD products
A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.
local
low complexity
amd
7.2
2022-05-10 CVE-2021-26332 Unspecified vulnerability in AMD products
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.
local
low complexity
amd
6.6
2022-05-10 CVE-2021-26353 Improper Initialization vulnerability in AMD products
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
local
low complexity
amd CWE-665
7.8
2022-05-10 CVE-2021-26370 Improper Input Validation vulnerability in AMD products
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
local
low complexity
amd CWE-20
6.6
2022-05-10 CVE-2021-46771 Unspecified vulnerability in AMD products
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
local
low complexity
amd
7.2