Improper Memory Address Validation in AMD's System Management Unit
CVE-2021-46764

7.5HIGH

Key Information:

Vendor

Amd
Status
2nd Gen Amd Epyc™
3rd Gen Amd Epyc™
Vendor
CVE Published:
9 May 2023

What is CVE-2021-46764?

The vulnerability in AMD's System Management Unit (SMU) stems from improper validation of DRAM addresses, which can be exploited by attackers to overwrite crucial memory locations. This flaw can potentially lead to a denial of service, disrupting the normal functioning of affected systems and exposing them to further risks. Users are encouraged to review security advisories and apply any necessary patches.

Affected Version(s)

2nd Gen AMD EPYC™ x86 various

3rd Gen AMD EPYC™ x86 various

References

https://www.amd.com/en/corporate/product-security/bulleti...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
The Cyber Security Vulnerability Database.