NetSight
high7.5

CVE-2021-46765

Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a…

Impact

Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potentially leading to a denial of service.

Affected products

VendorProductAffected versions
AmdRyzen 6600h Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6600hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6600u Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6800h Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6800hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6800u Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6900hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6900hx Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6980hs Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 6980hx Firmware
Version rembrandtpi-fp7_1.0.0.5
AmdRyzen 5300g Firmware
Versions cezannepi-fp6_1.0.0.b, comboam4v2_pi_1.2.0.8
AmdRyzen 5300ge Firmware
Versions cezannepi-fp6_1.0.0.b, comboam4v2_pi_1.2.0.8

Weakness classification

References