medium6.1
CVE-2021-46759
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under t…
Impact
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 5300g Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5300ge Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5500 Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5600 Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5600g Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5600ge Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5600x Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5700g Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5700ge Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5700x Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5800 Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |
| Amd | Ryzen 5800x3d Firmware | Versions cezannepi-fp6_1.0.0.8, comboam4v2_pi_1.2.0.5 |