Skip to content
fr Sign in
3.9 Low

CVE-2021-46772 Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to…

Description

Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory corruption or denial of service.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 7002 Series Processors Versions not published
AMD EPYC™ 7003 Series Processors Versions not published
AMD Ryzen™ 3000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Versions not published
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ Threadripper™ 3000 Series Processors Versions not published
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors Versions not published
Show the 18 other branches
Product Affected versions Fixed in
AMD Ryzen™ Threadripper™ PRO 5000WX Processors Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics Versions not published
AMD EPYC™ Embedded 7002 Series Processors Versions not published
AMD EPYC™ Embedded 7003 Series Processors Versions not published
AMD Ryzen™ Embedded R1000 Series Processors Versions not published
AMD Ryzen™ Embedded R2000 Series Processors Versions not published
AMD Ryzen™ Embedded 5000 Series Processors Versions not published
AMD Ryzen™ Embedded V1000 Series Processors Versions not published
AMD Ryzen™ Embedded V2000 Series Processors Versions not published
AMD Ryzen™ Embedded V3000 Series Processors Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 7002 Series Processors

The 16 CVEs of AMD EPYC™ 7002 Series Processors →
CVE-2025-54518 Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to… 7.3 High CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 High
Track this CVE