cbcvebase.
CVE-2021-46765
published 2023-05-09

CVE-2021-46765: Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a…

PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.62%
45.5th percentile
Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a denial of service.

Affected

83 ranges· showing 25
VendorProductVersion rangeFixed in
amdryzen_3000_series_mobile_processors_with_radeon_graphics_renoir——
amdryzen_3100_firmware——
amdryzen_3100_firmware——
amdryzen_3300x_firmware——
amdryzen_3300x_firmware——
amdryzen_3500_firmware——
amdryzen_3500_firmware——
amdryzen_3500x_firmware——
amdryzen_3500x_firmware——
amdryzen_3600_firmware——
amdryzen_3600_firmware——
amdryzen_3600x_firmware——
amdryzen_3600x_firmware——
amdryzen_3600xt_firmware——
amdryzen_3600xt_firmware——
amdryzen_3800x_firmware——
amdryzen_3800x_firmware——
amdryzen_3800xt_firmware——
amdryzen_3800xt_firmware——
amdryzen_3900_firmware——
amdryzen_3900_firmware——
amdryzen_3900x_firmware——
amdryzen_3900x_firmware——
amdryzen_3900xt_firmware——
amdryzen_3900xt_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.