CVE-2021-46757

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@amd.com

Published

2024-02-13

Last modified

2025-05-07

Weaknesses

CWE-119

Affected products

• Amd Ryzen Embedded 5000 (Amd)
• Amd Ryzen Embedded V2000 (Amd)
• Ryzen Embedded 5600e Firmware (Amd)
• Ryzen Embedded 5800e Firmware (Amd)
• Ryzen Embedded 5900e Firmware (Amd)
• Ryzen Embedded 5950e Firmware (Amd)
• Ryzen Embedded R2312 Firmware (Amd)
• Ryzen Embedded R2314 Firmware (Amd)
• Ryzen Embedded V2516 Firmware (Amd)
• Ryzen Embedded V2546 Firmware (Amd)
• Ryzen Embedded V2718 Firmware (Amd)
• Ryzen Embedded V2748 Firmware (Amd)

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001