CVEvulnerability
CVE-2021-46792
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-05-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-367
Description
Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.
Affected configurations
• amd ryzen 5300g firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5300ge firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5500 firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5600 firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5600g firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5600ge firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5600x firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5700g firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5700ge firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5700x firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5800 firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5800x3d firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5800x firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5900 firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5900x firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5945wx firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5950x firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5955wx firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5965wx firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5975wx firmware cezannepi-fp6 1.0.0.6
• amd ryzen 5995wx firmware cezannepi-fp6 1.0.0.6
• amd ryzen 3100 firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3100 firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3100 firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3300x firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3300x firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3300x firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3500 firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3500 firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3500 firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3500x firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3500x firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3500x firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3600 firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3600 firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3600 firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3600x firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3600x firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3600x firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3600xt firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3600xt firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3600xt firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3800x firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3800x firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3800x firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3800xt firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3800xt firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3800xt firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3900 firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3900 firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3900 firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3900x firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3900x firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3900x firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3900xt firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3900xt firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3900xt firmware renoirpi-fp6 1.0.0.7
• amd ryzen 3950x firmware comboam4v2 pi 1.2.0.5
• amd ryzen 3950x firmware picasso pi-fp5 1.0.0.4
• amd ryzen 3950x firmware renoirpi-fp6 1.0.0.7
… and 39 more
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness