CVE-2021-46754

Tuesday, May 09, 2023

N/A

Summary

Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.

Affected Software

Vendor	Product	Version Range	Status
AMD	Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4	`various`	affected
AMD	Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4	`various`	affected
AMD	Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP	`various`	affected
AMD	Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”	`various`	affected
AMD	Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5	`various`	affected
AMD	Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”	`various`	affected
AMD	Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”	`various`	affected
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”	`various`	affected
AMD	Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”	`various`	affected
AMD	AMD Ryzen™ Embedded R1000	`various`	affected
AMD	AMD Ryzen™ Embedded R2000	`various`	affected
AMD	AMD Ryzen™ Embedded V1000	`various`	affected
AMD	AMD Ryzen™ Embedded V2000	`various`	affected

CVE-2021-46754

Summary

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References

Feedback