Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAmd Ryzen 3100
HWAmdall versionsAmd Ryzen 3100 Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3300x
HWAmdall versionsAmd Ryzen 3300x Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3500
HWAmdall versionsAmd Ryzen 3500 Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3500x
HWAmdall versionsAmd Ryzen 3500x Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3600
HWAmdall versionsAmd Ryzen 3600 Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3600x
HWAmdall versionsAmd Ryzen 3600x Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3600xt
HWAmdall versionsAmd Ryzen 3600xt Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3800x
HWAmdall versionsAmd Ryzen 3800x Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3800xt
HWAmdall versionsAmd Ryzen 3800xt Firmware
OSAmdcomboam4pi_1.0.0.8comboam4v2_pi_1.2.0.6renoirpi-fp6_1.0.0.8Amd Ryzen 3900
HWAmdall versionsAmd Ryzen 3900 Firmware
OSAmdcomboam4pi_1.0.0.8Amd Ryzen 5300g
HWAmdall versionsAmd Ryzen 5300ge
HWAmdall versionsAmd Ryzen 5300ge Firmware
OSAmdcezannepi-fp6_1.0.0.bAmd Ryzen 5300g Firmware
OSAmdcezannepi-fp6_1.0.0.bAmd Ryzen 5500
HWAmdall versionsAmd Ryzen 5500 Firmware
OSAmdcezannepi-fp6_1.0.0.bAmd Ryzen 5600
HWAmdall versionsAmd Ryzen 5600 Firmware
OSAmdcezannepi-fp6_1.0.0.bAmd Ryzen 5600g
HWAmdall versionsAmd Ryzen 5600ge
HWAmdall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
Related vulnerabilities
CVE-2021-46754CRITICAL9.1PL ✓same product
Niewystarczająca walidacja danych wejściowych w bootloaderze AMD ASP
CVE-2021-46753CRITICAL9.1PL ✓same product
Brak walidacji nagłówków ASP Sensor Fusion Hub w procesorach AMD Ryzen
CVE-2021-46755HIGH7.5same product
Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow...
CVE-2021-46749HIGH7.5same product
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System ...
CVE-2021-46765HIGH7.5same product
Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memo...