VULNERABILITY INTELLIGENCE
CVE-2021-26364
CVSS score5.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2022-05-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- psirt@amd.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory