CVE-2021-26404

🗓️ 10 Jan 2023 20:56:44Reported by AMDType

CVE-2021-26404: Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure

Reporter	Title	Published	Views	Family All 9
Amd	AMD Server Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
CNNVD	AMD Secure Encrypted Virtualization (SEV) 输入验证错误漏洞	11 Jan 202300:00	–	cnnvd
Cvelist	CVE-2021-26404	10 Jan 202320:56	–	cvelist
EUVD	EUVD-2021-13210	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Dell PowerEdge	13 Jan 202300:00	–	ncsc
NVD	CVE-2021-26404	11 Jan 202308:15	–	nvd
Prion	Input validation	11 Jan 202308:15	–	prion
Positive Technologies	PT-2023-1485 · Amd · Amd Secure Encrypted Virtualization (Sev) Firmware	10 Jan 202300:00	–	ptsecurity
Vulnrichment	CVE-2021-26404	10 Jan 202320:56	–	vulnrichment

NVD

Node

amd epyc_7003_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7003Match-

Node

amd epyc_7313_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7313Match-

Node

amd epyc_7313p_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7313pMatch-

Node

amd epyc_7343_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7343Match-

Node

amd epyc_7373x_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7373xMatch-

Node

amd epyc_73f3_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_73f3Match-

Node

amd epyc_7413_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7413Match-

Node

amd epyc_7443_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7443Match-

Node

amd epyc_7443p_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7443pMatch-

Node

amd epyc_7453_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7453Match-

Node

amd epyc_7473x_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7473xMatch-

Node

amd epyc_74f3_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_74f3Match-

Node

amd epyc_7513_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7513Match-

Node

amd epyc_7543_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7543Match-

Node

amd epyc_7543p_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7543pMatch-

Node

amd epyc_7573x_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7573xMatch-

Node

amd epyc_7643_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7643Match-

Node

amd epyc_75f3_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_75f3Match-

Node

amd epyc_7663_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7663Match-

Node

amd epyc_7713_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7713Match-

Node

amd epyc_7713p_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7713pMatch-

Node

amd epyc_7763_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7763Match-

Node

amd epyc_7773x_firmwareRange<milanpi-sp3_1.0.0.9

AND

amd epyc_7773xMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

08 Apr 2025 21:15Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.5

EPSS0.00064

SSVC

CWE-20