critical9.8
CVE-2021-46760
A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentia…
Impact
A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentially lead to an attacker leaking sensitive information or achieving code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 3945wx Firmware | Versions castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7 |
| Amd | Ryzen 3955wx Firmware | Versions castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7 |
| Amd | Ryzen 3960x Firmware | Versions castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7 |
| Amd | Ryzen 3970x Firmware | Versions castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7 |
| Amd | Ryzen 3975wx Firmware | Versions castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7 |
| Amd | Ryzen 3990x Firmware | Versions castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7 |
| Amd | Ryzen 3995wx Firmware | Versions castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7 |