medium6.1
CVE-2021-46758
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flas…
Impact
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 7 5700g Firmware | before comboam4v2_pi_1.2.0.8 |
| Amd | Ryzen 7 5700ge Firmware | before comboam4v2_pi_1.2.0.8 |
| Amd | Ryzen 5 5600g Firmware | before comboam4v2_pi_1.2.0.8 |
| Amd | Ryzen 5 5600ge Firmware | before comboam4v2_pi_1.2.0.8 |
| Amd | Ryzen 3 5300g Firmware | before comboam4v2_pi_1.2.0.8 |
| Amd | Ryzen 3 5300ge Firmware | before comboam4v2_pi_1.2.0.8 |
| Amd | Ryzen 9 7950x3d Firmware | before comboam5_1.0.0.1 |
| Amd | Ryzen 9 7900x3d Firmware | before comboam5_1.0.0.1 |
| Amd | Ryzen 7 7800x3d Firmware | before comboam5_1.0.0.1 |
| Amd | Ryzen 9 4900h Firmware | before renoirpi-fp6_1.0.0.a |
| Amd | Ryzen 9 4900hs Firmware | before renoirpi-fp6_1.0.0.a |
| Amd | Ryzen 7 4800h Firmware | before renoirpi-fp6_1.0.0.a |