CVE-2021-46792
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD
Description
Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.
Affected (99)
Products: Amd: Ryzen 5300g Firmware, Ryzen 5300ge Firmware, Ryzen 5500 Firmware, Ryzen 5600 Firmware, Ryzen 5600g Firmware, Ryzen 5600ge Firmware, Ryzen 5600x Firmware, Ryzen 5700g Firmware, Ryzen 5700ge Firmware, Ryzen 5700x Firmware, Ryzen 5800 Firmware, Ryzen 5800x3d Firmware, Ryzen 5800x Firmware, Ryzen 5900 Firmware, Ryzen 5900x Firmware, Ryzen 5945wx Firmware, Ryzen 5950x Firmware, Ryzen 5955wx Firmware, Ryzen 5965wx Firmware, Ryzen 5975wx Firmware, Ryzen 5995wx Firmware, Ryzen 3100 Firmware, Ryzen 3300x Firmware, Ryzen 3500 Firmware, Ryzen 3500x Firmware, Ryzen 3600 Firmware, Ryzen 3600x Firmware, Ryzen 3600xt Firmware, Ryzen 3800x Firmware, Ryzen 3800xt Firmware, Ryzen 3900 Firmware, Ryzen 3900x Firmware, Ryzen 3900xt Firmware, Ryzen 3950x Firmware, Ryzen 1200 (af) Firmware, Ryzen 1600 (af) Firmware, Ryzen 2200g Firmware, Ryzen 2200ge Firmware, Ryzen 2300x Firmware, Ryzen 2400g Firmware, Ryzen 2400ge Firmware, Ryzen 2500x Firmware, Ryzen 2600 Firmware, Ryzen 2600e Firmware, Ryzen 2600x Firmware, Ryzen 2700 Firmware, Ryzen 2700e Firmware, Ryzen 2700x Firmware, Ryzen 2920x Firmware, Ryzen 2950x Firmware, Ryzen 2970wx Firmware, Ryzen 2990wx Firmware, Athlon Gold 3150g Firmware, Athlon Gold 3150ge Firmware, Athlon Silver 3050ge Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5300g | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5300ge | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5500 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600g | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600ge | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600x | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700g | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700ge | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700x | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800x3d | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800x | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5900 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5900x | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5945wx | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5950x | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5955wx | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5965wx | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5975wx | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version cezannepi-fp6_1.0.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5995wx | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3100 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3300x | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3500 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3500x | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600x | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600xt | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3800x | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3800xt | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900x | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900xt | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.5 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version picasso_pi-fp5_1.0.0.4 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version renoirpi-fp6_1.0.0.7 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3950x | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 1200 (af) | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 1600 (af) | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2200g | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2200ge | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2300x | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2400g | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2400ge | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2500x | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2600 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2600e | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2600x | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2700 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2700e | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2700x | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2920x | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2950x | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2970wx | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version pinnaclepi-am4_1.0.0.7 |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version raven-fp5-am4_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 2990wx | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version picassopi-fp5_1.0.0.4 |
| Running on/with | Platform Versions |
|---|---|
Amd Athlon Gold 3150g | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version picassopi-fp5_1.0.0.4 |
| Running on/with | Platform Versions |
|---|---|
Amd Athlon Gold 3150ge | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version picassopi-fp5_1.0.0.4 |
| Running on/with | Platform Versions |
|---|---|
Amd Athlon Silver 3050ge | All versions |
References (2)
Source: psirt@amd.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.