cbcvebase.
CVE-2021-46753
published 2023-05-09

CVE-2021-46753: Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the…

PriorityP347critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
0.56%
45.8th percentile
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.

Affected

187 ranges· showing 25
VendorProductVersion rangeFixed in
amdathlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_ulp——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_pollock——
amdathlon_gold_3150g_firmware——
amdathlon_gold_3150g_firmware——
amdathlon_gold_3150ge_firmware——
amdathlon_gold_3150ge_firmware——
amdathlon_silver_3050ge_firmware——
amdathlon_silver_3050ge_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_2000_series_desktop_processors_raven_ridge_am4——
amdryzen_2000_series_mobile_processors_raven_ridge_fp5——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200ge_firmware——
amdryzen_2200ge_firmware——
amdryzen_2200ge_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.