NetSight
critical9.1

CVE-2021-46753

Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the…

Impact

Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.

Affected products

VendorProductAffected versions
AmdRyzen 6600h Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6600hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6600u Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6800h Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6800hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6800u Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6900hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6900hx Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6980hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6980hx Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 5300g Firmware
Version cezannepi-fp6_1.0.0.8
AmdRyzen 5300ge Firmware
Version cezannepi-fp6_1.0.0.8

References