CVE-2021-26343

Published Jan 10, 2023 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.


Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-13149 Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Apr 9, 2025, 1:25 PM
Reserved
Jan 29, 2021, 9:24 PM
Status
Modified
Published
Jan 11, 2023, 8:15 AM
Modified
Jun 17, 2026, 3:43 AM