cbcvebase.
CVE-2021-46794
published 2023-05-09

CVE-2021-46794: Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum…

PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.62%
45.5th percentile
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.

Affected

181 ranges· showing 25
VendorProductVersion rangeFixed in
amd3rd_gen_amd_ryzen_threadripper_processors_castle_peak_hedt——
amdamd_ryzen_5000_series_desktop_processors_vermeer_am4——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_ulp——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_pollock——
amdathlon_gold_3150g_firmware——
amdathlon_gold_3150g_firmware——
amdathlon_gold_3150ge_firmware——
amdathlon_gold_3150ge_firmware——
amdathlon_silver_3050ge_firmware——
amdathlon_silver_3050ge_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1200_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_1600_firmware——
amdryzen_2000_series_desktop_processors_raven_ridge_am4——
amdryzen_2000_series_mobile_processors_raven_ridge_fp5——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200g_firmware——
amdryzen_2200ge_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.