Skip to content
fr Sign in
5.2 Medium

CVE-2021-46746 Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a…

Description

Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing keys to c006Frrupt the return address, causing a stack-based buffer overrun, potentially leading to a denial of service.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 7001 Processors Versions not published
AMD EPYC™ 7002 Processors Versions not published
AMD EPYC™ 7003 Processors Versions not published
AMD EPYC™ 9004 Processors Versions not published
AMD Ryzen™ 3000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 7000 Series Desktop Processors Versions not published
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics Versions not published
Show the 25 other branches
Product Affected versions Fixed in
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ Threadripper™ 3000 Series Processors Versions not published
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors Versions not published
AMD Ryzen™ Threadripper™ PRO 5000WX Processors Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7045 Series Mobile Processors Versions not published
AMD EPYC™ Embedded 3000 Series Processors Versions not published
AMD EPYC™ Embedded 7002 Series Processors Versions not published
AMD EPYC™ Embedded 7003 Series Processors Versions not published
AMD EPYC™ Embedded 9003 Series Processors Versions not published
AMD Ryzen™ Embedded R1000 Series Processors Versions not published
AMD Ryzen™ Embedded R2000 Series Processors Versions not published
AMD Ryzen™ Embedded 5000 Series Processors Versions not published
AMD Ryzen™ Embedded 7000 Series Processors Versions not published
AMD Ryzen™ Embedded V1000 Series Processors Versions not published
AMD Ryzen™ Embedded V2000 Series Processors Versions not published
AMD Ryzen™ Embedded V3000 Series Processors Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 7001 Processors

The 3 CVEs of AMD EPYC™ 7001 Processors →
CVE-2024-21925 Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM,… 8.2 High CVE-2023-20578 A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or… 7.5 High
Track this CVE