Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a denial of service.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HAmd Ryzen 3100
HWAmdall versionsAmd Ryzen 3100 Firmware
OSAmdcomboam4v2_pi_1.2.0.8renoirpi-fp6_1.0.0.9Amd Ryzen 3300x
HWAmdall versionsAmd Ryzen 3300x Firmware
OSAmdcomboam4v2_pi_1.2.0.8renoirpi-fp6_1.0.0.9Amd Ryzen 3500
HWAmdall versionsAmd Ryzen 3500 Firmware
OSAmdcomboam4v2_pi_1.2.0.8renoirpi-fp6_1.0.0.9Amd Ryzen 3500x
HWAmdall versionsAmd Ryzen 3500x Firmware
OSAmdcomboam4v2_pi_1.2.0.8renoirpi-fp6_1.0.0.9Amd Ryzen 3600
HWAmdall versionsAmd Ryzen 3600 Firmware
OSAmdcomboam4v2_pi_1.2.0.8renoirpi-fp6_1.0.0.9Amd Ryzen 3600x
HWAmdall versionsAmd Ryzen 3600x Firmware
OSAmdcomboam4v2_pi_1.2.0.8Amd Ryzen 5300g
HWAmdall versionsAmd Ryzen 5300ge
HWAmdall versionsAmd Ryzen 5300ge Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5300g Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5500
HWAmdall versionsAmd Ryzen 5500 Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5600
HWAmdall versionsAmd Ryzen 5600 Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5600g
HWAmdall versionsAmd Ryzen 5600ge
HWAmdall versionsAmd Ryzen 5600ge Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5600g Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5600x
HWAmdall versionsAmd Ryzen 5600x Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5700g
HWAmdall versionsAmd Ryzen 5700ge
HWAmdall versionsAmd Ryzen 5700ge Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8Amd Ryzen 5700g Firmware
OSAmdcezannepi-fp6_1.0.0.bcomboam4v2_pi_1.2.0.8
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
Related vulnerabilities
CVE-2021-46754CRITICAL9.1PL ✓same product
Niewystarczająca walidacja danych wejściowych w bootloaderze AMD ASP
CVE-2021-46753CRITICAL9.1PL ✓same product
Brak walidacji nagłówków ASP Sensor Fusion Hub w procesorach AMD Ryzen
CVE-2021-46755HIGH7.5same product
Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow...
CVE-2021-46749HIGH7.5same product
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System ...
CVE-2021-46773HIGH8.8same product
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resul...