CVE-2021-46765
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.
Affected (78)
Products: Amd: Ryzen 6600h Firmware, Ryzen 6600hs Firmware, Ryzen 6600u Firmware, Ryzen 6800h Firmware, Ryzen 6800hs Firmware, Ryzen 6800u Firmware, Ryzen 6900hs Firmware, Ryzen 6900hx Firmware, Ryzen 6980hs Firmware, Ryzen 6980hx Firmware, Ryzen 5300g Firmware, Ryzen 5300ge Firmware, Ryzen 5500 Firmware, Ryzen 5600 Firmware, Ryzen 5600g Firmware, Ryzen 5600ge Firmware, Ryzen 5600x Firmware, Ryzen 5700g Firmware, Ryzen 5700ge Firmware, Ryzen 5700x Firmware, Ryzen 5800 Firmware, Ryzen 5800x3d Firmware, Ryzen 5800x Firmware, Ryzen 5900 Firmware, Ryzen 5900x Firmware, Ryzen 5945wx Firmware, Ryzen 5950x Firmware, Ryzen 5955wx Firmware, Ryzen 5965wx Firmware, Ryzen 5975wx Firmware, Ryzen 5995wx Firmware, Ryzen 3100 Firmware, Ryzen 3300x Firmware, Ryzen 3500 Firmware, Ryzen 3500x Firmware, Ryzen 3600 Firmware, Ryzen 3600x Firmware, Ryzen 3600xt Firmware, Ryzen 3800x Firmware, Ryzen 3800xt Firmware, Ryzen 3900 Firmware, Ryzen 3900x Firmware, Ryzen 3900xt Firmware, Ryzen 3950x Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6600h | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6600hs | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6600u | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6800h | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6800hs | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6800u | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6900hs | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6900hx | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6980hs | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version rembrandtpi-fp7_1.0.0.5 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 6980hx | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5300g | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5300ge | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5500 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600g | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600ge | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600x | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700g | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700ge | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700x | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800x3d | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800x | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5900 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5900x | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5945wx | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5950x | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5955wx | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5965wx | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5975wx | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.b |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5995wx | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3100 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3300x | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3500 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3500x | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600x | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600xt | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3800x | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3800xt | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900x | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900xt | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.8 |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3950x | All versions |
References (2)
Source: psirt@amd.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.