7.5
Élevée
CVE-2021-46794 Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management…
Description
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 | Versions non publiées | |
| Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 | Versions non publiées | |
| AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4 | Versions non publiées | |
| Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 | Versions non publiées | |
| 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT | Versions non publiées | |
| Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS | Versions non publiées | |
| Ryzen™ Threadripper™ PRO Processors “Chagall” WS | Versions non publiées | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP | Versions non publiées | |
| Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | Versions non publiées |
Afficher les 5 autres branches Masquer les 5 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5 | Versions non publiées | |
| Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso” | Versions non publiées | |
| Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” | Versions non publiées | |
| Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | Versions non publiées | |
| Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Les 11 CVE de Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 →
CVE-2021-46792
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a…
5.9
Moyenne
CVE-2021-46773
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in…
8.8
Élevée
CVE-2021-46759
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical…
6.1
Moyenne
CVE-2021-46756
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an…
9.1
Critique