VYPR
← All advisories
High severity7.1NVD Advisory· Published Jan 11, 2023· Updated Jun 17, 2026

CVE-2021-26402

CVE-2021-26402

Description

Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.

Affected products

53
  • AMD/Epyc 7002 Firmware
    cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7003 Firmware
    cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7642 Firmware3 versions
    cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7252 Firmware
    cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7262 Firmware
    cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7742 Firmware4 versions
    cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7542 Firmware2 versions
    cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 72f3 Firmware
    cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7302 Firmware2 versions
    cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7302p Firmware
    cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7313 Firmware
    cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7313p Firmware
    cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7343 Firmware
    cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7352 Firmware
    cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7373x Firmware
    cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 73f3 Firmware
    cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7402 Firmware
    cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7413 Firmware
    cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7443 Firmware
    cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7443p Firmware
    cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7452 Firmware
    cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7453 Firmware
    cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 74f3 Firmware
    cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7502 Firmware
    cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7513 Firmware
    cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7f32 Firmware3 versions
    cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7543 Firmware
    cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7543p Firmware
    cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7573x Firmware
    cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 75f3 Firmware
    cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7643 Firmware
    cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7662 Firmware
    cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7663 Firmware
    cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7702 Firmware
    cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7713 Firmware
    cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7713p Firmware
    cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7743 Firmware
    cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7763 Firmware
    cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7773x Firmware
    cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7f52 Firmware
    cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7f72 Firmware
    cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Secure Processorllm-fuzzy
  • AMD/2nd Gen EPYCv5
    Range: Various
  • AMD/3rd Gen EPYCv5
    Range: various

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.