Description
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
Scores
CVSS v3
6.7
EPSS
0.0003
EPSS Percentile
9.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (50)
amd/epyc_7001_firmware
< naplespi_1.0.0.k
amd/epyc_7203_firmware
< milanpi_1.0.0.b
amd/epyc_7203p_firmware
< milanpi_1.0.0.b
amd/epyc_7232p_firmware
< romepi_1.0.0.g
amd/epyc_7251_firmware
< naplespi_1.0.0.k
amd/epyc_7252_firmware
< romepi_1.0.0.g
amd/epyc_7261_firmware
< naplespi_1.0.0.k
amd/epyc_7262_firmware
< romepi_1.0.0.g
amd/epyc_7272_firmware
< romepi_1.0.0.g
amd/epyc_7281_firmware
< naplespi_1.0.0.k
... and 40 more
Published
Nov 14, 2023
Tracked Since
Feb 18, 2026