CVE-2021-46758 : Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor)

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

Published 2023-11-14 19:15:10

Updated 2023-12-28 17:38:01

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2021-46758

AMD » Ryzen 9 5980hx Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5980hx » Version: N/A
AMD » Ryzen 9 5980hs Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5980hs » Version: N/A
AMD » Ryzen 7 5825u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5825u » Version: N/A
AMD » Ryzen 9 5900hx Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5900hx » Version: N/A
AMD » Ryzen 9 5900hs Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5900hs » Version: N/A
AMD » Ryzen 5 5625u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5625u » Version: N/A
AMD » Ryzen 7 5800h Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5800h » Version: N/A
AMD » Ryzen 7 5800hs Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5800hs » Version: N/A
AMD » Ryzen 5 5600h Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600h » Version: N/A
AMD » Ryzen 5 5600hs Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600hs » Version: N/A
AMD » Ryzen 7 5800u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5800u » Version: N/A
AMD » Ryzen 5 5600u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600u » Version: N/A
AMD » Ryzen 3 5425u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5425u » Version: N/A
AMD » Ryzen 3 5400u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5400u » Version: N/A
AMD » Ryzen 9 4900hs Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_9_4900hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 4900hs » Version: N/A
AMD » Ryzen 7 4800h Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_7_4800h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 4800h » Version: N/A
AMD » Ryzen 5 4600h Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_5_4600h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 4600h » Version: N/A
AMD » Ryzen 7 5700g Firmware
Versions before (<) comboam4v2_pi_1.2.0.8
cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5700g » Version: N/A
AMD » Ryzen 7 5700ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.8
cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5700ge » Version: N/A
AMD » Ryzen 3 5300g Firmware
Versions before (<) comboam4v2_pi_1.2.0.8
cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5300g » Version: N/A
AMD » Ryzen 3 5300ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.8
cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5300ge » Version: N/A
AMD » Ryzen 5 5560u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5560u » Version: N/A
AMD » Ryzen 3 5125c Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5125c » Version: N/A
AMD » Ryzen 5 5600g Firmware
Versions before (<) comboam4v2_pi_1.2.0.8
cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600g » Version: N/A
AMD » Ryzen 5 5600ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.8
cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600ge » Version: N/A
AMD » Ryzen 3 5300u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_3_5300u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5300u » Version: N/A
AMD » Ryzen 5 5500u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_5500u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5500u » Version: N/A
AMD » Ryzen 7 5700u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_7_5700u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5700u » Version: N/A
AMD » Ryzen 9 4900h Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_9_4900h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 4900h » Version: N/A
AMD » Ryzen 7 4800u Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_7_4800u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 4800u » Version: N/A
AMD » Ryzen 7 4700u Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_7_4700u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 4700u » Version: N/A
AMD » Ryzen 5 4600u Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_5_4600u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 4600u » Version: N/A
AMD » Ryzen 5 4500u Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_5_4500u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 4500u » Version: N/A
AMD » Ryzen 3 4300u Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_3_4300u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 4300u » Version: N/A
AMD » Ryzen 9 6980hx Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_9_6980hx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 6980hx » Version: N/A
AMD » Ryzen 9 6980hs Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_9_6980hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 6980hs » Version: N/A
AMD » Ryzen 9 6900hx Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_9_6900hx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 6900hx » Version: N/A
AMD » Ryzen 9 6900hs Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_9_6900hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 6900hs » Version: N/A
AMD » Ryzen 7 6800h Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_7_6800h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 6800h » Version: N/A
AMD » Ryzen 7 6800hs Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_7_6800hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 6800hs » Version: N/A
AMD » Ryzen 7 6800u Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_7_6800u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 6800u » Version: N/A
AMD » Ryzen 5 6600h Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_5_6600h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 6600h » Version: N/A
AMD » Ryzen 5 6600hs Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_5_6600hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 6600hs » Version: N/A
AMD » Ryzen 5 6600u Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_5_6600u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 6600u » Version: N/A
AMD » Ryzen 9 7950x3d Firmware
Versions before (<) comboam5_1.0.0.1
cpe:2.3:o:amd:ryzen_9_7950x3d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 7950x3d » Version: N/A
AMD » Ryzen 9 7900x3d Firmware
Versions before (<) comboam5_1.0.0.1
cpe:2.3:o:amd:ryzen_9_7900x3d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 7900x3d » Version: N/A
AMD » Ryzen 7 7800x3d Firmware
Versions before (<) comboam5_1.0.0.1
cpe:2.3:o:amd:ryzen_7_7800x3d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 7800x3d » Version: N/A
AMD » Ryzen 7 4800hs Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_7_4800hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 4800hs » Version: N/A
AMD » Ryzen 7 4980u Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_7_4980u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 4980u » Version: N/A
AMD » Ryzen 5 4600hs Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_5_4600hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 4600hs » Version: N/A
AMD » Ryzen 5 4680u Firmware
Versions before (<) renoirpi-fp6_1.0.0.a
cpe:2.3:o:amd:ryzen_5_4680u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 4680u » Version: N/A
AMD » Ryzen 7 Pro 7730u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_7_pro_7730u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 Pro 7730u » Version: N/A
AMD » Ryzen 5 Pro 7530u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_pro_7530u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 Pro 7530u » Version: N/A
AMD » Ryzen 3 Pro 7330u Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_3_pro_7330u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 Pro 7330u » Version: N/A
AMD » Ryzen 7 7735hs Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_7_7735hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 7735hs » Version: N/A
AMD » Ryzen 7 7736u Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_7_7736u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 7736u » Version: N/A
AMD » Ryzen 7 7735u Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_7_7735u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 7735u » Version: N/A
AMD » Ryzen 5 7535hs Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_5_7535hs_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 7535hs » Version: N/A
AMD » Ryzen 5 7535u Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_5_7535u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 7535u » Version: N/A
AMD » Ryzen 3 7335u Firmware
Versions before (<) rembrandtpi-fp7_1.0.0.5
cpe:2.3:o:amd:ryzen_3_7335u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 7335u » Version: N/A
AMD » Ryzen 5 5500h Firmware
Versions before (<) cezannepi-fp6_1.0.0.c
cpe:2.3:o:amd:ryzen_5_5500h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5500h » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-46758

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 13 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-46758

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.1	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H	0.9	5.2	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High

References for CVE-2021-46758

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

AMD Client Vulnerabilities – November 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-46758

Products affected by CVE-2021-46758

Exploit prediction scoring system (EPSS) score for CVE-2021-46758

CVSS scores for CVE-2021-46758

References for CVE-2021-46758