CVE Feed

    Dashboard / CVE / CVE-2021-46758

    CVE-2021-46758

    Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

    Published:Nov 14, 2023
    Last Modified:Nov 21, 2024
    EPS:Nov 14, 2023
    EPSS Score:0.001
    CVSS Score:6.1

    Affected Products

    Vendor
    Amd
    Product
    Ryzen 3 4300u
    Vendor
    Amd
    Product
    Ryzen 3 4300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5125c
    Vendor
    Amd
    Product
    Ryzen 3 5125c Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300g
    Vendor
    Amd
    Product
    Ryzen 3 5300g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300ge
    Vendor
    Amd
    Product
    Ryzen 3 5300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300u
    Vendor
    Amd
    Product
    Ryzen 3 5300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5400u
    Vendor
    Amd
    Product
    Ryzen 3 5400u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5425u
    Vendor
    Amd
    Product
    Ryzen 3 5425u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 7335u
    Vendor
    Amd
    Product
    Ryzen 3 7335u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 7330u
    Vendor
    Amd
    Product
    Ryzen 3 Pro 7330u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4500u
    Vendor
    Amd
    Product
    Ryzen 5 4500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4600h
    Vendor
    Amd
    Product
    Ryzen 5 4600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4600hs
    Vendor
    Amd
    Product
    Ryzen 5 4600hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4600u
    Vendor
    Amd
    Product
    Ryzen 5 4600u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4680u
    Vendor
    Amd
    Product
    Ryzen 5 4680u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5500h
    Vendor
    Amd
    Product
    Ryzen 5 5500h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5500u
    Vendor
    Amd
    Product
    Ryzen 5 5500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5560u
    Vendor
    Amd
    Product
    Ryzen 5 5560u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600g
    Vendor
    Amd
    Product
    Ryzen 5 5600g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600ge
    Vendor
    Amd
    Product
    Ryzen 5 5600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600h
    Vendor
    Amd
    Product
    Ryzen 5 5600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600hs
    Vendor
    Amd
    Product
    Ryzen 5 5600hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600u
    Vendor
    Amd
    Product
    Ryzen 5 5600u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5625u
    Vendor
    Amd
    Product
    Ryzen 5 5625u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 6600h
    Vendor
    Amd
    Product
    Ryzen 5 6600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 6600hs
    Vendor
    Amd
    Product
    Ryzen 5 6600hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 6600u
    Vendor
    Amd
    Product
    Ryzen 5 6600u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7535hs
    Vendor
    Amd
    Product
    Ryzen 5 7535hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7535u
    Vendor
    Amd
    Product
    Ryzen 5 7535u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7530u
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7530u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4700u
    Vendor
    Amd
    Product
    Ryzen 7 4700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4800h
    Vendor
    Amd
    Product
    Ryzen 7 4800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4800hs
    Vendor
    Amd
    Product
    Ryzen 7 4800hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4800u
    Vendor
    Amd
    Product
    Ryzen 7 4800u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4980u
    Vendor
    Amd
    Product
    Ryzen 7 4980u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700g
    Vendor
    Amd
    Product
    Ryzen 7 5700g Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700ge
    Vendor
    Amd
    Product
    Ryzen 7 5700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700u
    Vendor
    Amd
    Product
    Ryzen 7 5700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800h
    Vendor
    Amd
    Product
    Ryzen 7 5800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800hs
    Vendor
    Amd
    Product
    Ryzen 7 5800hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800u
    Vendor
    Amd
    Product
    Ryzen 7 5800u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5825u
    Vendor
    Amd
    Product
    Ryzen 7 5825u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 6800h
    Vendor
    Amd
    Product
    Ryzen 7 6800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 6800hs
    Vendor
    Amd
    Product
    Ryzen 7 6800hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 6800u
    Vendor
    Amd
    Product
    Ryzen 7 6800u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7735hs
    Vendor
    Amd
    Product
    Ryzen 7 7735hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7735u
    Vendor
    Amd
    Product
    Ryzen 7 7735u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7736u
    Vendor
    Amd
    Product
    Ryzen 7 7736u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7800x3d
    Vendor
    Amd
    Product
    Ryzen 7 7800x3d Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7730u
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7730u Firmware
    Vendor
    Amd
    Product
    Ryzen 9 4900h
    Vendor
    Amd
    Product
    Ryzen 9 4900h Firmware
    Vendor
    Amd
    Product
    Ryzen 9 4900hs
    Vendor
    Amd
    Product
    Ryzen 9 4900hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900hs
    Vendor
    Amd
    Product
    Ryzen 9 5900hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900hx
    Vendor
    Amd
    Product
    Ryzen 9 5900hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5980hs
    Vendor
    Amd
    Product
    Ryzen 9 5980hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5980hx
    Vendor
    Amd
    Product
    Ryzen 9 5980hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6900hs
    Vendor
    Amd
    Product
    Ryzen 9 6900hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6900hx
    Vendor
    Amd
    Product
    Ryzen 9 6900hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6980hs
    Vendor
    Amd
    Product
    Ryzen 9 6980hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6980hx
    Vendor
    Amd
    Product
    Ryzen 9 6980hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 7900x3d
    Vendor
    Amd
    Product
    Ryzen 9 7900x3d Firmware
    Vendor
    Amd
    Product
    Ryzen 9 7950x3d
    Vendor
    Amd
    Product
    Ryzen 9 7950x3d Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-20579 (CVSS 6) — Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged…
    CVE-2023-4969 (CVSS 6.5) — A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimi…
    CVE-2022-23821 (CVSS 9.8) — Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially …
    CVE-2022-23820 (CVSS 7.5) — Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially le…
    CVE-2023-31320 (CVSS 7.5) — Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the dis…
    CVE-2023-20568 (CVSS 6.7) — Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with a…
    CVE-2023-20567 (CVSS 6.7) — Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with a…
    CVE-2021-46748 (CVSS 5.5) — Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside …
    CVE-2023-20555 (CVSS 7.8) — Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriti…
    CVE-2022-27672 (CVSS 4.7) — When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sib…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High