Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a potential denial of service.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HAmd Ryzen 3100
HWAmdall versionsAmd Ryzen 3100 Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3300x
HWAmdall versionsAmd Ryzen 3300x Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3500
HWAmdall versionsAmd Ryzen 3500 Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3500x
HWAmdall versionsAmd Ryzen 3500x Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3600
HWAmdall versionsAmd Ryzen 3600 Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3600x
HWAmdall versionsAmd Ryzen 3600x Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3600xt
HWAmdall versionsAmd Ryzen 3600xt Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3800x
HWAmdall versionsAmd Ryzen 3800x Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3800xt
HWAmdall versionsAmd Ryzen 3800xt Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3900
HWAmdall versionsAmd Ryzen 3900 Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3900x
HWAmdall versionsAmd Ryzen 3900x Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3900xt
HWAmdall versionsAmd Ryzen 3900xt Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 3950x
HWAmdall versionsAmd Ryzen 3950x Firmware
OSAmdcomboam4pi_1.0.0.9comboam4_v2_pi_1.2.0.8Amd Ryzen 5500
HWAmdall versionsAmd Ryzen 5500 Firmware
OSAmdcomboam4v2_pi_1.2.0.6comboam4_v2_pi_1.2.0.8Amd Ryzen 5600
HWAmdall versionsAmd Ryzen 5600 Firmware
OSAmdcomboam4v2_pi_1.2.0.6comboam4_v2_pi_1.2.0.8
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
Related vulnerabilities
CVE-2021-46754CRITICAL9.1PL ✓same product
Niewystarczająca walidacja danych wejściowych w bootloaderze AMD ASP
CVE-2021-46753CRITICAL9.1PL ✓same product
Brak walidacji nagłówków ASP Sensor Fusion Hub w procesorach AMD Ryzen
CVE-2021-46765HIGH7.5same product
Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memo...
CVE-2021-46749HIGH7.5same product
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System ...
CVE-2021-46773HIGH8.8same product
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resul...