Description (CNA)
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD EPYC™ 9004 Series Processors | unaffected GenoaPI 1.0.0.G |
| AMD / AMD EPYC™ 7003 Series Processors | unaffected MilanPI 1.0.0.H |
| AMD / AMD EPYC™ 7002 Series Processors | unaffected RomePI 1.0.0.N |
| AMD / AMD EPYC™ 7001 Series Processors | unaffected NaplesPI 1.0.0.R |
| AMD / AMD EPYC™ 9005 Series Processors | unaffected TurinPI 1.0.0.6 |
| AMD / AMD Instinct™ MI300A | unaffected MI300A 1.0.0.B |
| AMD / AMD EPYC™ 9V64H Processor | unaffected MI300C 1.0.0.2 |
| AMD / AMD Ryzen™ Threadripper™ PRO 3000WX Processors | unaffected ChagallWSPI-sWRX8 1.0.0.C; unaffected CastlePeakWSPI-sWRX8 1.0.0.I |
| AMD / AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors | unaffected ChagallWSPI-sWRX8 1.0.0.C |
| AMD / AMD Ryzen™ Threadripper™ 7000 Processors | unaffected StormPeakPI-SP6_1.0.0.1l; unaffected ShimadaPeakPI-SP6_1.0.0.1 |
| AMD / AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | unaffected StormPeakPI-SP6_1.1.0.0j; unaffected ShimadaPeakPI-SP6_1.0.0.1 |
| AMD / AMD Ryzen™ Threadripper™ 9000 Processors | unaffected ShimadaPeakPI-SP6_1.0.0.1 |
| AMD / AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors | unaffected ShimadaPeakPI-SP6_1.0.0.1 |
| AMD / AMD EPYC™ Embedded 7003 Series Processors | unaffected EmbMilanPI-SP3 v9 1.0.0.C |
| AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") | unaffected EmbGenoaPI-SP5 1.0.0.B |
| AMD / AMD EPYC™ Embedded 7002 Series Processors | unaffected EmbRomePI-SP3 1.0.0.F |
| AMD / AMD EPYC™ Embedded 3000 Series Processors | unaffected SnowyOwl_SP4_SP4r2.1.1.0.H |
| AMD / AMD EPYC™ Embedded 9005 Series Processors | unaffected EmbTurinPI-SP5_1.0.0.1 |
| AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") | unaffected EmbGenoaPI-SP5 1.0.0.B |
| AMD / AMD EPYC™ Embedded 8004 Series Processors | unaffected EmbGenoaPI-SP5 1.0.0.B |
CWE
CWE-1274
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html
ADP enrichment
No English description supplied.
No references supplied.