CVE-2021-26353

Published May 10, 2022 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-13159 Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
History
Type Values Removed Values Added
Description Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity. Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Aug 3, 2024, 8:26 PM
Reserved
Jan 29, 2021, 12:00 AM
Status
Modified
Published
May 10, 2022, 7:15 PM
Modified
Jun 17, 2026, 3:43 AM