A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userspace, potentially leading to information disclosure.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Epyc_7773x_firmware | Amd | * | milanpi_1.0.0.6 (excluding) |