CVE-2021-26344

HIGH Year: 2021
CVSS v3 Score
8.2
High
Weakness Type
CWE-787
View all →

Vulnerability Description

An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially modify the APCB block resulting in arbitrary code execution.

Related Vulnerabilities

CVE-2018-11806

HIGH
CVSS:8.2(High)

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CWE-7872018

CVE-2018-1635

HIGH
CVSS:8.2(High)

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root ...

CWE-7872018

CVE-2018-1636

HIGH
CVSS:8.2(High)

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root ...

CWE-7872018

CVE-2018-3880

HIGH
CVSS:8.2(High)

An exploitable stack-based buffer overflow vulnerability exists in the database 'find-by-cameraId' functionality of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0...

CWE-7872018

CVE-2019-12325

HIGH
CVSS:8.2(High)

The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker to crash the device (DoS) without authen...

CWE-7872019

CVE-2019-2867

HIGH
CVSS:8.2(High)

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vuln...

CWE-7872019