CVE-2021-46758

Published: Nov 14, 2023Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 0.9 / Impact: 5.2

Source: NVD

Description

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

Affected (61)

Products: Amd: Ryzen 7 5700g Firmware, Ryzen 7 5700ge Firmware, Ryzen 5 5600g Firmware, Ryzen 5 5600ge Firmware, Ryzen 3 5300g Firmware, Ryzen 3 5300ge Firmware, Ryzen 9 7950x3d Firmware, Ryzen 9 7900x3d Firmware, Ryzen 7 7800x3d Firmware, Ryzen 9 4900h Firmware, Ryzen 9 4900hs Firmware, Ryzen 7 4800h Firmware, Ryzen 7 4800hs Firmware, Ryzen 7 4980u Firmware, Ryzen 7 4800u Firmware, Ryzen 7 4700u Firmware, Ryzen 5 4600h Firmware, Ryzen 5 4600hs Firmware, Ryzen 5 4680u Firmware, Ryzen 5 4600u Firmware, Ryzen 5 4500u Firmware, Ryzen 3 4300u Firmware, Ryzen 7 5700u Firmware, Ryzen 5 5500u Firmware, Ryzen 3 5300u Firmware, Ryzen 9 5980hx Firmware, Ryzen 9 5980hs Firmware, Ryzen 9 5900hx Firmware, Ryzen 9 5900hs Firmware, Ryzen 7 5800h Firmware, Ryzen 7 5800hs Firmware, Ryzen 7 5825u Firmware, Ryzen 7 5800u Firmware, Ryzen 5 5600h Firmware, Ryzen 5 5600hs Firmware, Ryzen 5 5625u Firmware, Ryzen 5 5600u Firmware, Ryzen 5 5560u Firmware, Ryzen 5 5500h Firmware, Ryzen 3 5425u Firmware, Ryzen 3 5400u Firmware, Ryzen 3 5125c Firmware, Ryzen 9 6980hx Firmware, Ryzen 9 6980hs Firmware, Ryzen 9 6900hx Firmware, Ryzen 9 6900hs Firmware, Ryzen 7 6800h Firmware, Ryzen 7 6800hs Firmware, Ryzen 7 6800u Firmware, Ryzen 5 6600h Firmware, Ryzen 5 6600hs Firmware, Ryzen 5 6600u Firmware, Ryzen 7 7735hs Firmware, Ryzen 7 7736u Firmware, Ryzen 7 7735u Firmware, Ryzen 5 7535hs Firmware, Ryzen 5 7535u Firmware, Ryzen 3 7335u Firmware, Ryzen 7 Pro 7730u Firmware, Ryzen 5 Pro 7530u Firmware, Ryzen 3 Pro 7330u Firmware

Amd

61 products

Ryzen 7 5700g Firmware

Ryzen 7 5700ge Firmware

Ryzen 5 5600g Firmware

Ryzen 5 5600ge Firmware

Ryzen 3 5300g Firmware

Ryzen 3 5300ge Firmware

Ryzen 9 7950x3d Firmware

Ryzen 9 7900x3d Firmware

Ryzen 7 7800x3d Firmware

Ryzen 9 4900h Firmware

Ryzen 9 4900hs Firmware

Ryzen 7 4800h Firmware

Ryzen 7 4800hs Firmware

Ryzen 7 4980u Firmware

Ryzen 7 4800u Firmware

Ryzen 7 4700u Firmware

Ryzen 5 4600h Firmware

Ryzen 5 4600hs Firmware

Ryzen 5 4680u Firmware

Ryzen 5 4600u Firmware

Ryzen 5 4500u Firmware

Ryzen 3 4300u Firmware

Ryzen 7 5700u Firmware

Ryzen 5 5500u Firmware

Ryzen 3 5300u Firmware

Ryzen 9 5980hx Firmware

Ryzen 9 5980hs Firmware

Ryzen 9 5900hx Firmware

Ryzen 9 5900hs Firmware

Ryzen 7 5800h Firmware

Ryzen 7 5800hs Firmware

Ryzen 7 5825u Firmware

Ryzen 7 5800u Firmware

Ryzen 5 5600h Firmware

Ryzen 5 5600hs Firmware

Ryzen 5 5625u Firmware

Ryzen 5 5600u Firmware

Ryzen 5 5560u Firmware

Ryzen 5 5500h Firmware

Ryzen 3 5425u Firmware

Ryzen 3 5400u Firmware

Ryzen 3 5125c Firmware

Ryzen 9 6980hx Firmware

Ryzen 9 6980hs Firmware

Ryzen 9 6900hx Firmware

Ryzen 9 6900hs Firmware

Ryzen 7 6800h Firmware

Ryzen 7 6800hs Firmware

Ryzen 7 6800u Firmware

Ryzen 5 6600h Firmware

Ryzen 5 6600hs Firmware

Ryzen 5 6600u Firmware

Ryzen 7 7735hs Firmware

Ryzen 7 7736u Firmware

Ryzen 7 7735u Firmware

Ryzen 5 7535hs Firmware

Ryzen 5 7535u Firmware

Ryzen 3 7335u Firmware

Ryzen 7 Pro 7730u Firmware

Ryzen 5 Pro 7530u Firmware

Ryzen 3 Pro 7330u Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5700g Firmware	Before comboam4v2_pi_1.2.0.8

Running on/with	Platform Versions
Amd Ryzen 7 5700g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5700ge Firmware	Before comboam4v2_pi_1.2.0.8

Running on/with	Platform Versions
Amd Ryzen 7 5700ge	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600g Firmware	Before comboam4v2_pi_1.2.0.8

Running on/with	Platform Versions
Amd Ryzen 5 5600g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600ge Firmware	Before comboam4v2_pi_1.2.0.8

Running on/with	Platform Versions
Amd Ryzen 5 5600ge	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5300g Firmware	Before comboam4v2_pi_1.2.0.8

Running on/with	Platform Versions
Amd Ryzen 3 5300g	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5300ge Firmware	Before comboam4v2_pi_1.2.0.8

Running on/with	Platform Versions
Amd Ryzen 3 5300ge	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 7950x3d Firmware	Before comboam5_1.0.0.1

Running on/with	Platform Versions
Amd Ryzen 9 7950x3d	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 7900x3d Firmware	Before comboam5_1.0.0.1

Running on/with	Platform Versions
Amd Ryzen 9 7900x3d	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 7800x3d Firmware	Before comboam5_1.0.0.1

Running on/with	Platform Versions
Amd Ryzen 7 7800x3d	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 4900h Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 9 4900h	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 4900hs Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 9 4900hs	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 4800h Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 7 4800h	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 4800hs Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 7 4800hs	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 4980u Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 7 4980u	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 4800u Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 7 4800u	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 4700u Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 7 4700u	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 4600h Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 5 4600h	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 4600hs Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 5 4600hs	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 4680u Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 5 4680u	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 4600u Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 5 4600u	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 4500u Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 5 4500u	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 4300u Firmware	Before renoirpi-fp6_1.0.0.a

Running on/with	Platform Versions
Amd Ryzen 3 4300u	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5700u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 7 5700u	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5500u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 5500u	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5300u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 3 5300u	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hx Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 9 5980hx	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hs Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 9 5980hs	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hx Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 9 5900hx	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hs Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 9 5900hs	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800h Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 7 5800h	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800hs Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 7 5800hs	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5825u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 7 5825u	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 7 5800u	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600h Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 5600h	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600hs Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 5600hs	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5625u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 5625u	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 5600u	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5560u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 5560u	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5500h Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 5500h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5425u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 3 5425u	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5400u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 3 5400u	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5125c Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 3 5125c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 6980hx Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 9 6980hx	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 6980hs Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 9 6980hs	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 6900hx Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 9 6900hx	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 6900hs Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 9 6900hs	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 6800h Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 7 6800h	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 6800hs Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 7 6800hs	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 6800u Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 7 6800u	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 6600h Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 5 6600h	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 6600hs Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 5 6600hs	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 6600u Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 5 6600u	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 7735hs Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 7 7735hs	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 7736u Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 7 7736u	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 7735u Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 7 7735u	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 7535hs Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 5 7535hs	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 7535u Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 5 7535u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 7335u Firmware	Before rembrandtpi-fp7_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen 3 7335u	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 Pro 7730u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 7 Pro 7730u	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 Pro 7530u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 5 Pro 7530u	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 Pro 7330u Firmware	Before cezannepi-fp6_1.0.0.c

Running on/with	Platform Versions
Amd Ryzen 3 Pro 7330u	All versions

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.