CVEvulnerability

CVE-2021-46754

9.1 CRITICAL Published 2023-05-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-20

Description

Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.

Affected configurations

• amd ryzen 5300g firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5300ge firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5500 firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5600 firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5600g firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5600ge firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5600x firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5700g firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5700ge firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5700x firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5800 firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5800x3d firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5800x firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5900 firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5900x firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5945wx firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5950x firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5955wx firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5965wx firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5975wx firmware cezannepi-fp6 1.0.0.6 • amd ryzen 5995wx firmware cezannepi-fp6 1.0.0.6 • amd ryzen 3100 firmware comboam4pi 1.0.0.9 • amd ryzen 3100 firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3100 firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3100 firmware picassopi-fp5 1.0.0.e • amd ryzen 3100 firmware renoirpi-fp6 1.0.0.7 • amd ryzen 3300x firmware comboam4pi 1.0.0.9 • amd ryzen 3300x firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3300x firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3300x firmware picassopi-fp5 1.0.0.e • amd ryzen 3300x firmware renoirpi-fp6 1.0.0.7 • amd ryzen 3500 firmware comboam4pi 1.0.0.9 • amd ryzen 3500 firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3500 firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3500 firmware picassopi-fp5 1.0.0.e • amd ryzen 3500 firmware renoirpi-fp6 1.0.0.7 • amd ryzen 3500x firmware comboam4pi 1.0.0.9 • amd ryzen 3500x firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3500x firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3500x firmware picassopi-fp5 1.0.0.e • amd ryzen 3500x firmware renoirpi-fp6 1.0.0.7 • amd ryzen 3600 firmware comboam4pi 1.0.0.9 • amd ryzen 3600 firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3600 firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3600 firmware picassopi-fp5 1.0.0.e • amd ryzen 3600 firmware renoirpi-fp6 1.0.0.7 • amd ryzen 3600x firmware comboam4pi 1.0.0.9 • amd ryzen 3600x firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3600x firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3600x firmware picassopi-fp5 1.0.0.e • amd ryzen 3600x firmware renoirpi-fp6 1.0.0.7 • amd ryzen 3600xt firmware comboam4pi 1.0.0.9 • amd ryzen 3600xt firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3600xt firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3600xt firmware picassopi-fp5 1.0.0.e • amd ryzen 3600xt firmware renoirpi-fp6 1.0.0.7 • amd ryzen 3800x firmware comboam4pi 1.0.0.9 • amd ryzen 3800x firmware comboam4v2 pi 1.2.0.5 • amd ryzen 3800x firmware comboam4v2 pi 1.2.0.8 • amd ryzen 3800x firmware picassopi-fp5 1.0.0.e … and 108 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References