Vulnerabilities > AMD > Epyc 7601 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-11-16 CVE-2021-26321 Command Injection vulnerability in AMD products
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.
local
low complexity
amd CWE-77
5.5
2021-11-16 CVE-2021-26330 Out-of-bounds Write vulnerability in AMD products
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.
local
low complexity
amd CWE-787
5.5
2021-11-16 CVE-2021-26312 Exposure of Resource to Wrong Sphere vulnerability in AMD products
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
local
low complexity
amd CWE-668
5.5
2021-11-16 CVE-2021-26329 Integer Overflow or Wraparound vulnerability in AMD products
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.
local
low complexity
amd CWE-190
5.5