Non notée
CVE-2021-46754 Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp…
Description
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 | Versions non publiées | |
| Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 | Versions non publiées | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP | Versions non publiées | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | Versions non publiées | |
| Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5 | Versions non publiées | |
| Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso” | Versions non publiées | |
| Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” | Versions non publiées | |
| Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | Versions non publiées | |
| Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” | Versions non publiées |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD Ryzen™ Embedded R1000 | Versions non publiées | |
| AMD Ryzen™ Embedded R2000 | Versions non publiées | |
| AMD Ryzen™ Embedded V1000 | Versions non publiées | |
| AMD Ryzen™ Embedded V2000 | Versions non publiées |
Références
- www.amd.com www.amd.com
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Les 11 CVE de Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 →
CVE-2021-46794
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…
7.5
Élevée
CVE-2021-46792
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a…
5.9
Moyenne
CVE-2021-46773
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…
8.8
Élevée
CVE-2021-46759
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical…
6.1
Moyenne