CVE-2021-26346 | BDVDB-2026-192548 Detail
AMDRyzen 5000 Series
Description#
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: local.
Weaknesses#
- CWE-190 Integer Overflow or Wraparound
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.