9.1
Critical
CVE-2021-46756 Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an…
Description
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 | Versions not published | |
| Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” | Versions not published | |
| Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 | Versions not published | |
| AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4 | Versions not published | |
| Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 | Versions not published | |
| 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax” | Versions not published | |
| 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT | Versions not published | |
| Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS | Versions not published | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP | Versions not published |
Show the 9 other branches Hide the 9 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | Versions not published | |
| Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5 | Versions not published | |
| Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso” | Versions not published | |
| Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” | Versions not published | |
| Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | Versions not published | |
| Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” | Versions not published | |
| 1st Gen AMD EPYC™ Processors | Versions not published | |
| 2nd Gen AMD EPYC™ Processors | Versions not published | |
| 3rd Gen AMD EPYC™ Processors | Versions not published |
References
- www.amd.com www.amd.com
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
The 11 CVEs of Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 →
CVE-2021-46794
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…
7.5
High
CVE-2021-46792
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a…
5.9
Medium
CVE-2021-46773
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…
8.8
High
CVE-2021-46759
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical…
6.1
Medium