CVEs-PoC/2021/CVE-2021-26356.md

CVE-2021-26356

Description

A TOCTOU in ASP bootloader may allow an attackerto tamper with the SPI ROM following data read to memory potentially resultingin S3 data corruption and information disclosure.

POC

Reference

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

Github

No PoCs found on GitHub currently.