Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 4.7 | MEDIUM | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
| Primary | 2.0 | 4.7 | MEDIUM | AV:L/AC:M/Au:N/C:N/I:N/A:C |
| CWE ID | Type | Source |
|---|---|---|
| CWE-1284 | Primary | nvd@nist.gov |
| Hyperlink | Source | Resource |
|---|---|---|
| https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031 | psirt@amd.com | N/A |