cbcvebase.
CVE-2021-46758
published 2023-11-14

CVE-2021-46758: Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI…

medium6.1CVSS 3.1
AVPACLPRNUINSUCNIHAH
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

Affected

70 ranges· showing 25
VendorProductVersion rangeFixed in
amdamd_ryzen_5000_series_processors_with_radeon_graphics_barcelo
amdamd_ryzen_6000_series_processors_with_radeon_graphics_rembrandt
amdamd_ryzen_7030_series_mobile_processors_with_radeon_graphics_barcelo-r
amdamd_ryzen_7035_series_processors_with_radeon_graphics_rembrandt-r
amdryzen_3_4300u_firmware< renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amdryzen_3_5125c_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amdryzen_3_5300g_firmware< comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amdryzen_3_5300ge_firmware< comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amdryzen_3_5300u_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amdryzen_3_5400u_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amdryzen_3_5425u_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amdryzen_3_7335u_firmware< rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amdryzen_3_pro_7330u_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amdryzen_4000_series_mobile_processors_with_radeon_graphics_renoir_fp6
amdryzen_5000_series_desktop_processor_with_radeon_graphics_cezanne
amdryzen_5000_series_mobile_processors_with_radeon_graphics_cezanne
amdryzen_5000_series_mobile_processors_with_radeon_graphics_lucienne
amdryzen_5_4500u_firmware< renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amdryzen_5_4600h_firmware< renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amdryzen_5_4600hs_firmware< renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amdryzen_5_4600u_firmware< renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amdryzen_5_4680u_firmware< renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amdryzen_5_5500h_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amdryzen_5_5500u_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amdryzen_5_5560u_firmware< cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c