romepi.1.0.0.c

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-11	CVE-2021-26316	Improper Input Validation vulnerability in AMD products Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution. local low complexity amd CWE-20	7.8
2023-01-11	CVE-2023-20525	Improper Input Validation vulnerability in AMD products Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service. network low complexity amd CWE-20	6.5