CRITICAL🇵🇱 Wersja polska

CVE-2021-46753

CVSS 9.1v3.1pub. 2023-05-09upd. 2025-01-28

Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Amd Ryzen 3100

    HW
    Amd
    all versions

  • Amd Ryzen 3100 Firmware

    OS
    Amd
    comboam4pi_1.0.0.9comboam4v2_pi_1.2.0.5comboam4v2_pi_1.2.0.8picassopi-fp5_1.0.0.erenoirpi-fp6_1.0.0.8

  • Amd Ryzen 3300x

    HW
    Amd
    all versions

  • Amd Ryzen 3300x Firmware

    OS
    Amd
    comboam4pi_1.0.0.9comboam4v2_pi_1.2.0.5comboam4v2_pi_1.2.0.8picassopi-fp5_1.0.0.erenoirpi-fp6_1.0.0.8

  • Amd Ryzen 3500

    HW
    Amd
    all versions

  • Amd Ryzen 3500 Firmware

    OS
    Amd
    comboam4pi_1.0.0.9comboam4v2_pi_1.2.0.5comboam4v2_pi_1.2.0.8picassopi-fp5_1.0.0.erenoirpi-fp6_1.0.0.8

  • Amd Ryzen 3500x

    HW
    Amd
    all versions

  • Amd Ryzen 3500x Firmware

    OS
    Amd
    comboam4pi_1.0.0.9comboam4v2_pi_1.2.0.5comboam4v2_pi_1.2.0.8picassopi-fp5_1.0.0.erenoirpi-fp6_1.0.0.8

  • Amd Ryzen 3600

    HW
    Amd
    all versions

  • Amd Ryzen 3600 Firmware

    OS
    Amd
    comboam4pi_1.0.0.9comboam4v2_pi_1.2.0.5comboam4v2_pi_1.2.0.8picassopi-fp5_1.0.0.erenoirpi-fp6_1.0.0.8

  • Amd Ryzen 3600x

    HW
    Amd
    all versions

  • Amd Ryzen 3600x Firmware

    OS
    Amd
    comboam4pi_1.0.0.9comboam4v2_pi_1.2.0.5comboam4v2_pi_1.2.0.8picassopi-fp5_1.0.0.erenoirpi-fp6_1.0.0.8

  • Amd Ryzen 3600xt

    HW
    Amd
    all versions

  • Amd Ryzen 3600xt Firmware

    OS
    Amd
    comboam4pi_1.0.0.9

  • Amd Ryzen 5300g

    HW
    Amd
    all versions

  • Amd Ryzen 5300ge

    HW
    Amd
    all versions

  • Amd Ryzen 5300ge Firmware

    OS
    Amd
    cezannepi-fp6_1.0.0.8

  • Amd Ryzen 5300g Firmware

    OS
    Amd
    cezannepi-fp6_1.0.0.8

  • Amd Ryzen 5500

    HW
    Amd
    all versions

  • Amd Ryzen 5500 Firmware

    OS
    Amd
    cezannepi-fp6_1.0.0.8

  • Amd Ryzen 5600

    HW
    Amd
    all versions

  • Amd Ryzen 5600 Firmware

    OS
    Amd
    cezannepi-fp6_1.0.0.8

  • Amd Ryzen 5600g

    HW
    Amd
    all versions

  • Amd Ryzen 5600ge

    HW
    Amd
    all versions

  • Amd Ryzen 5600ge Firmware

    OS
    Amd
    cezannepi-fp6_1.0.0.8

  • Amd Ryzen 5600g Firmware

    OS
    Amd
    cezannepi-fp6_1.0.0.8

  • Amd Ryzen 5600x

    HW
    Amd
    all versions

  • Amd Ryzen 5600x Firmware

    OS
    Amd
    cezannepi-fp6_1.0.0.8

  • Amd Ryzen 5700g

    HW
    Amd
    all versions

  • Amd Ryzen 5700ge

    HW
    Amd
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-46754CRITICAL9.1PL ✓same product

Niewystarczająca walidacja danych wejściowych w bootloaderze AMD ASP

CVE-2021-46765HIGH7.5same product

Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memo...

CVE-2021-46755HIGH7.5same product

Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow...

CVE-2021-46749HIGH7.5same product

Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System ...

CVE-2021-46773HIGH8.8same product

Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resul...