cbcvebase.
CVE-2021-46759
published 2023-05-09

CVE-2021-46759: Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under…

PriorityP429medium6.1CVSS 3.1
AVPACLPRNUINSUCHIHAN
EPSS
0.28%
20.4th percentile
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.

Affected

197 ranges· showing 25
VendorProductVersion rangeFixed in
amdathlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_ulp——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_pollock——
amdathlon_gold_3150g_firmware——
amdathlon_gold_3150g_firmware——
amdathlon_gold_3150ge_firmware——
amdathlon_gold_3150ge_firmware——
amdathlon_silver_3050ge_firmware——
amdathlon_silver_3050ge_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_2000_series_desktop_processors_raven_ridge_am4——
amdryzen_2000_series_mobile_processors_raven_ridge_fp5——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200ge_firmware——
amdryzen_2200ge_firmware——
amdryzen_2200ge_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.