Description (CNA)
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / Ryzen 5000 Series | affected various |
| AMD / Ryzen 2000 Series | affected various |
| AMD / Ryzen 3000 Series | affected various |
| AMD / 1st Gen EPYC | affected various |
| AMD / 2nd Gen EPYC | affected Various |
| AMD / 3rd Gen EPYC | affected various |
CWE
No CWE identifiers supplied.
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.