What is CVE-2021-26364?

CVE-2021-26364 is a medium-severity vulnerability in Amd Epyc 7232p, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 5.5/10. Published 2022-05-11.

How severe is CVE-2021-26364?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Buffer overflow in Amd Epyc 7232p

CVE-2021-26364

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (11.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@amd.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-26364?: CVE-2021-26364 is a medium-severity vulnerability in Amd Epyc 7232p, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 5.5/10. Published 2022-05-11.
How severe is CVE-2021-26364?: Medium severity. CVSS v3 base score is 5.5 out of 10.