CVE-2021-46748 — Improper Restriction of Operations within the Bounds of a Memory Buffer in AMD Radeon Software

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 76.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
AMD Radeon SoftwareIntel Radeon RX Vega M FirmwareAMD Radeon PRO W5000 W6000 W7000 Series Graphics Cards+3 more
Timeline
PublishedNov 14

Description

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶NVDamd/radeon_software< 23.7.1+1

🔴Vulnerability Details

2
CVEList
CVE-2021-46748: Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a T↗2023-11-14
▶
GHSA
GHSA-p483-8797-gq74: Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a T↗2023-11-14
▶
CVE-2021-46748 — AMD Radeon Software vulnerability | cvebase