7.5
High
CVE-2021-46765 Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads…
Description
Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 | Versions not published | |
| Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” | Versions not published | |
| Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | Versions not published | |
| Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” | Versions not published | |
| Ryzen™ 6000 Series Mobile Processors "Rembrandt" | Versions not published |
Other CVEs of Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4
The 13 CVEs of Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 →
CVE-2023-20555
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an…
Not rated
CVE-2021-46794
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…
7.5
High
CVE-2021-46792
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a…
5.9
Medium
CVE-2021-46773
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…
8.8
High