Skip to content
fr Sign in
3.0 Low

CVE-2021-46750 Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to…

Description

Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR (Trusted Memory Region) that was previously allocated by the ASP bootloader leading to a potential loss of integrity.

Affected products and versions

Product Affected versions Fixed in
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Desktop Processors Versions not published
AMD Ryzen™ Embedded R1000 Series Processors Versions not published
Show the 7 other branches
Product Affected versions Fixed in
AMD Ryzen™ Embedded R2000 Series Processors Versions not published
AMD Ryzen™ Embedded V1000 Series Processors Versions not published
AMD Ryzen™ Embedded V2000 Series Processors Versions not published
AMD Ryzen™ Embedded V3000 Series Versions not published
AMD Radeon™ RX 6000 Series Graphics Products Versions not published
AMD Radeon™ PRO W6000 Series Graphics Products Versions not published
AMD Radeon™ PRO V620 Graphics Products Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

The 41 CVEs of AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics →
CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… 6.9 Medium CVE-2023-20577 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… 7.4 High CVE-2023-20572 An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against… 5.6 Medium CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 High
Track this CVE