medium5.9
CVE-2021-46792
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to…
Impact
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 5300g Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5300ge Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5500 Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600 Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600g Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600ge Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5600x Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5700g Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5700ge Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5700x Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5800 Firmware | Version cezannepi-fp6_1.0.0.6 |
| Amd | Ryzen 5800x3d Firmware | Version cezannepi-fp6_1.0.0.6 |