CVE-2021-46774

published 2023-11-14

CVE-2021-46774: Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.

Affected

132 ranges · showing 25

Vendor	Product	Version range	Fixed in
amd	1st_gen_amd_epyc_processors	—	—
amd	2nd_gen_amd_epyc_processors	—	—
amd	3rd_gen_amd_epyc_processors	—	—
amd	4th_gen_amd_epyc_processors	—	—
amd	amd_epyc_embedded_3000	—	—
amd	amd_epyc_embedded_7002	—	—
amd	amd_epyc_embedded_7003	—	—
amd	amd_ryzen_5000_series_desktop_processors_vermeer	—	—
amd	amd_ryzen_embedded_5000	—	—
amd	amd_ryzen_threadripper_3000_series_processors_castle_peak_hedt	—	—
amd	amd_ryzen_threadripper_pro_3000wx_series_processors_chagall_ws	—	—
amd	amd_ryzen_threadripper_pro_processors_castle_peak_ws_sp3	—	—
amd	epyc_7001_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7203_firmware	< milanpi_1.0.0.b	milanpi_1.0.0.b
amd	epyc_7203p_firmware	< milanpi_1.0.0.b	milanpi_1.0.0.b
amd	epyc_7232p_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7251_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7252_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7261_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7262_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7272_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7281_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7282_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_72f3_firmware	< milanpi_1.0.0.b	milanpi_1.0.0.b
amd	epyc_7301_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k