CVE-2021-46795

published 2023-01-11

CVE-2021-46795: A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that…

medium 4.7 CVSS 3.1

AV L AC H PR L UI N S U C N I N A H

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
amd	cezannepi-fp6_firmware	< 1.0.0.6	1.0.0.6
amd	comboam4v2_pi_firmware	< 1.2.0.5	1.2.0.5
amd	renoirpi-fp6_firmware	< 1.0.0.7	1.0.0.7
amd	ryzen_3000_series	—	—
amd	ryzen_5000_series	—	—

CWE-367