AMD 1st Gen AMD EPYCâ„¢

CVE-2021-26329
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.22 % · percentile 12 ()
State
PUBLISHED
Published
Updated
Assigner
AMD
NVD status
Modified

Description

AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.

Weaknesses (CWE)

  • CWE-130 — Improper Handling of Length Parameter Inconsistency
  • CWE-190 — Integer Overflow or Wraparound

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0LOW 2.1AV:L/AC:L/Au:N/C:N/I:N/A:PNVD · nvd@nist.gov (Primary)

European references

Affected configurations (NVD CPE)

Affected products

ProductVersions
AMD · 1st Gen AMD EPYC™affected unspecified < NaplesPI-SP3_1.0.0.G
AMD · 2nd Gen AMD EPYC™affected unspecified < RomePI-SP3_1.0.0.C
AMD · 3rd Gen AMD EPYC™affected unspecified < MilanPI-SP3_1.0.0.4

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD