2787 matches found
CVE-2021-26336
CVE-2021-26336 concerns AMD System Management Unit (SMU) with insufficient bounds checking that can cause invalid memory accesses/updates, leading to an SMU hang and the system may fail to service further requests from other components. Multiple sources confirm the issue under the SMU and referen...
CVE-2021-26338
The CVE targets AMD's System Management Unit (SMU) in AMD EPYC processors (1st–3rd Gen) where improper access controls may allow an attacker to override DRAM performance-control tables, risking resource exhaustion. Affected components/versions are stated in AMD’s bulletin AMD-SB-1021 (AGESA mitig...
PT-2021-17013 · Unknown · Amd System Management Unit
Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bounds checking in the System Management Unit SMU, which may cause invalid memory accesses or updates. This could result in the SMU...
CVE-2021-26329: Improper Handling of Length Parameter Inconsistency
AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...
CVE-2021-26338: Improper Access Control
Improper access controls in System Management Unit SMU may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources...
PT-2021-17010
Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The AMD System Management Unit SMU may experience a heap-based overflow, which may result in a loss of resources. Recommendations At the moment, there is no information...
CVE-2020-12961: Improper Input Validation
A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...
CVE-2021-26336: Improper Restriction of Operations within the Bounds of a Memory Buffer
Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...
CVE-2021-26330: Heap-based Buffer Overflow
AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...
PT-2021-17014 · Amd · Athlon™ Series +87
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to insufficient DRAM address validation in the System Management Unit SMU, which may cause a DMA read from an invalid DRAM address to SRAM. This can result in t...
CVE-2021-26337: Undefined Security Weakness
Insufficient DRAM address validation in System Management Unit SMU may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests...
PT-2021-17009
Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided, potentially resulting in a loss of resources. Recommendations ...
PT-2021-17011
Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The issue allows a malicious user to manipulate mailbox entries, potentially leading to arbitrary code execution. Recommendations At the moment, there is no information...
CVE-2021-26331: Improper Input Validation
AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...
PT-2021-9515
Name of the Vulnerable Software and Affected Versions AMD Platform Security Processor PSP affected versions not specified Description A potential issue exists in the AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network,...
PT-2021-17015 · Unknown · Amd System Management Unit
Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to improper access controls in the System Management Unit SMU, which may allow an attacker to override performance control tables located in DRAM. Th...
CVE-2021-36325
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36324
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36323
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...