Medium severity · published Nov 14, 2023
CVE-2021-46758
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a…
6.1
CVSS
0.3%
EPSS
No
On KEV
Description
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” · AMD
various · source: vendor
AR
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" · AMD
various · source: vendor
AR
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” · AMD
various · source: vendor
AR
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” · AMD
various · source: vendor
R4
Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 · AMD
various · source: vendor
R5
Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” · AMD
various · source: vendor
R5
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” · AMD
various · source: vendor
R5
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” · AMD
various · source: vendor
R7
Ryzen™ 7000 Series Desktop Processors “Raphael” XD3 · AMD
various · source: vendor
R3
Ryzen 3 4300u Firmware · Amd
before renoirpi-fp6_1.0.0.a · source: NVD
R3
Ryzen 3 5125c Firmware · Amd
before cezannepi-fp6_1.0.0.c · source: NVD
R3
Ryzen 3 5300g Firmware · Amd
before comboam4v2_pi_1.2.0.8 · source: NVD
Affected product
AR
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”
AMD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-46758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-46758
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
More from AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”
9.8
CVE-2022-23821
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution
9.8
CVE-2022-23820
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution
8.1
CVE-2023-20571
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation
7.8
CVE-2023-20565
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access
7.8
CVE-2023-20563
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access