VulnerabilityModified
CVE-2021-46758
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
MEDIUM 6.1EPSS 0.33%
Does this matter?
Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own.
Description
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- EPSS
- 0.33% probability · 25th percentile
- CISA KEV
- Not listed
- Affected
- amd/ryzen 7 5700g firmware · amd/ryzen 7 5700ge firmware · amd/ryzen 5 5600g firmware · amd/ryzen 5 5600ge firmware · amd/ryzen 3 5300g firmware · amd/ryzen 3 5300ge firmware · amd/ryzen 9 7950x3d firmware · amd/ryzen 9 7900x3d firmware · amd/ryzen 7 7800x3d firmware · amd/ryzen 9 4900h firmware · amd/ryzen 9 4900hs firmware · amd/ryzen 7 4800h firmware · amd/ryzen 7 4800hs firmware · amd/ryzen 7 4980u firmware · amd/ryzen 7 4800u firmware · amd/ryzen 7 4700u firmware · amd/ryzen 5 4600h firmware · amd/ryzen 5 4600hs firmware · amd/ryzen 5 4680u firmware · amd/ryzen 5 4600u firmware · +40 more
- Source
- psirt@amd.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.