cbcvebase.
CVE-2021-46755
published 2023-05-09

CVE-2021-46755: Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to…

PriorityP335high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.62%
45.5th percentile
Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a potential denial of service.

Affected

55 ranges· showing 25
VendorProductVersion rangeFixed in
amd3rd_gen_amd_ryzen_threadripper_processors_castle_peak_hedt——
amdamd_ryzen_5000_series_desktop_processors_vermeer_am4——
amdryzen_3000_series_desktop_processors_matisse_am4——
amdryzen_3000_series_mobile_processors_with_radeon_graphics_renoir——
amdryzen_3100_firmware——
amdryzen_3100_firmware——
amdryzen_3300x_firmware——
amdryzen_3300x_firmware——
amdryzen_3500_firmware——
amdryzen_3500_firmware——
amdryzen_3500x_firmware——
amdryzen_3500x_firmware——
amdryzen_3600_firmware——
amdryzen_3600_firmware——
amdryzen_3600x_firmware——
amdryzen_3600x_firmware——
amdryzen_3600xt_firmware——
amdryzen_3600xt_firmware——
amdryzen_3800x_firmware——
amdryzen_3800x_firmware——
amdryzen_3800xt_firmware——
amdryzen_3800xt_firmware——
amdryzen_3900_firmware——
amdryzen_3900_firmware——
amdryzen_3900x_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.