critical9.1
CVE-2021-46754
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into e…
Impact
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 5300g Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5300ge Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5500 Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600 Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600g Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600ge Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600x Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5700g Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5700ge Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5700x Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5800 Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5800x3d Firmware | Version cezannepi-fp6_1.0.0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001