GHSA-q8v2-mprw-g7w2Medium
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an...
🔗 CVE IDs covered (1)
📋 Description
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access to the Trusted Execution Environment (TEE) interface or Trusted Application (TA) to cause an out-of-bounds write, potentially resulting in a loss of platform integrity or denial of service.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2024-36344
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3057.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6028.html
- https://github.com/advisories/GHSA-q8v2-mprw-g7w2