Description
Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
Scores
CVSS v3
7.1
EPSS
0.0009
EPSS Percentile
26.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (23)
amd/epyc_72f3_firmware
< milanpi_1.0.0.9
amd/epyc_7313_firmware
< milanpi_1.0.0.9
amd/epyc_7313p_firmware
< milanpi_1.0.0.9
amd/epyc_7343_firmware
< milanpi_1.0.0.9
amd/epyc_7373x_firmware
< milanpi_1.0.0.9
amd/epyc_73f3_firmware
< milanpi_1.0.0.9
amd/epyc_7413_firmware
< milanpi_1.0.0.9
amd/epyc_7443_firmware
< milanpi_1.0.0.9
amd/epyc_7443p_firmware
< milanpi_1.0.0.9
amd/epyc_7453_firmware
< milanpi_1.0.0.9
... and 13 more
Published
May 09, 2023
Tracked Since
Feb 18, 2026