CVE-2021-46765

Summary

Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a denial of service.

Affected Software

VendorProductVersion RangeStatus
AMDRyzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4variousaffected
AMDRyzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”variousaffected
AMDRyzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”variousaffected
AMDRyzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”variousaffected
AMDRyzen™ 6000 Series Mobile Processors “Rembrandt”variousaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References