VYPR
← All advisories
High severity7.1NVD Advisory· Published May 10, 2022· Updated Jun 17, 2026

CVE-2021-26370

CVE-2021-26370

Description

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.

Affected products

52
  • AMD/AMD Secure Loaderllm-create
  • AMD/Epyc 7763 Firmware
    cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7713p Firmware
    cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7713 Firmware
    cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7663 Firmware
    cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7643 Firmware
    cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 75f3 Firmware
    cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7543p Firmware
    cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7543 Firmware
    cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7513 Firmware
    cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7453 Firmware
    cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 74f3 Firmware
    cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7443p Firmware
    cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7443 Firmware
    cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7413 Firmware
    cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 73f3 Firmware
    cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7343 Firmware
    cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7313p Firmware
    cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7313 Firmware
    cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 72f3 Firmware
    cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7773x Firmware
    cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7473x Firmware
    cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7573x Firmware
    cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7373x Firmware
    cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi-sp3_1.0.0.4
  • AMD/Epyc 7002 Firmware
    cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7642 Firmware3 versions
    cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7252 Firmware
    cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7262 Firmware
    cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7742 Firmware4 versions
    cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7542 Firmware2 versions
    cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7302 Firmware2 versions
    cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7302p Firmware
    cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7352 Firmware
    cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7402 Firmware
    cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7452 Firmware
    cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7502 Firmware
    cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7f32 Firmware3 versions
    cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
    • cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7662 Firmware
    cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7702 Firmware
    cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7f72 Firmware
    cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/Epyc 7f52 Firmware
    cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
    Range: <romepi-sp3_1.0.0.c
  • AMD/2nd Gen AMD EPYC™v5
    Range: unspecified
  • AMD/3rd Gen AMD EPYC™v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.