CVE-2021-46768

CVSS V2 None CVSS V3 None
Description
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.
Overview
  • CVE ID
  • CVE-2021-46768
  • Assigner
  • psirt@amd.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-11T08:15:13
  • Last Modified Date
  • 2023-01-18T21:01:27
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:amd:romepi_firmware:*:*:*:*:*:*:*:* 1 OR 1.0.0.d
cpe:2.3:h:amd:romepi:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:amd:milanpi_firmware:*:*:*:*:*:*:*:* 1 OR 1.0.0.5
cpe:2.3:h:amd:milanpi:-:*:*:*:*:*:*:* 0 OR
History
Created Old Value New Value Data Type Notes
2023-01-12 05:17:11 Added to TrackCVE
2023-01-18 11:15:36 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-18 21:13:39 2023-01-18T21:01:27 CVE Modified Date updated
2023-01-18 21:13:39 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-18 21:13:41 Weakness Enumeration new
2023-01-18 21:13:42 CPE Information updated