CVE-2021-26316highCWE-20

CVE-2021-26316: high-severity vulnerability in AMD 1st Gen EPYC

Published · Updated

Follow this CVE+ Monitor 3rd Gen EPYC+ Monitor 2nd Gen EPYC

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.3%
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
AMD · 1st Gen EPYCAMD · 2nd Gen EPYCAMD · 3rd Gen EPYCAMD · Ryzen 2000 SeriesAMD · Ryzen 3000 SeriesAMD · Ryzen 5000 Series
Related CVEs — AMD 1st Gen EPYC

In the same product, most dangerous first.

CVE-2023-20531HIGHCVE-2023-20531EPSS 0.6%CVE-2023-20530HIGHCVE-2023-20530EPSS 0.6%CVE-2023-20529HIGHCVE-2023-20529EPSS 0.6%CVE-2023-20522HIGHCVE-2023-20522EPSS 0.6%CVE-2023-20527MEDIUMCVE-2023-20527EPSS 0.6%CVE-2023-20525MEDIUMCVE-2023-20525EPSS 0.6%