← back
CVE-2021-26388

CVE-2021-26388

EPSS 0.2%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 May 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.
Affected products
AMD · Athlon™ SeriesAMD · EPYC™ ProcessorsAMD · Ryzen™ Series

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028