CVE-2021-46758

Published: Nov 14, 2023

Modified: Aug 4, 2024

PUBLISHED

Description

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

Vendor	Product	Versions
AMD	Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”	affected `various`
AMD	Ryzen™ 7000 Series Desktop Processors “Raphael” XD3	affected `various`
AMD	Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6	affected `various`
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”	affected `various`
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”	affected `various`
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"	affected `various`
AMD	AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”	affected `various`
AMD	AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”	affected `various`
AMD	AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”	affected `various`

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-46758

Description

Affected Products

References