cbcvebase.
CVE-2021-46756
published 2023-05-09

CVE-2021-46756: Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send…

PriorityP348critical9.1CVSS 3.1
AVNACLPRNUINSUCNIHAH
EPSS
0.65%
50.4th percentile
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

Affected

80 ranges· showing 25
VendorProductVersion rangeFixed in
amd1st_gen_amd_epyc_processors——
amd2nd_gen_amd_epyc_processors——
amd2nd_gen_amd_ryzen_threadripper_processors_colfax——
amd3rd_gen_amd_epyc_processors——
amd3rd_gen_amd_ryzen_threadripper_processors_castle_peak_hedt——
amdamd_ryzen_5000_series_desktop_processors_vermeer_am4——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_ulp——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_pollock——
amdepyc_7232p_firmware——
amdepyc_7251_firmware——
amdepyc_7252_firmware——
amdepyc_7261_firmware——
amdepyc_7262_firmware——
amdepyc_7272_firmware——
amdepyc_7281_firmware——
amdepyc_7282_firmware——
amdepyc_72f3_firmware——
amdepyc_7301_firmware——
amdepyc_7302_firmware——
amdepyc_7302p_firmware——
amdepyc_7313_firmware——
amdepyc_7313p_firmware——
amdepyc_7343_firmware——
amdepyc_7351_firmware——
amdepyc_7351p_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.