BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.
Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2021-33448 | Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service. |
Tue, 28 Jan 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Subscriptions
Status: PUBLISHED
Assigner: AMD
Published:
Updated: 2025-01-28T15:33:26.980Z
Reserved: 2022-05-04T18:14:06.437Z
Link: CVE-2021-46792
Updated: 2024-08-04T05:17:42.668Z
Status : Modified
Published: 2023-05-09T20:15:12.413
Modified: 2025-01-28T16:15:33.137
Link: CVE-2021-46792
No data.
OpenCVE Enrichment
No data.
EUVD