CVE-2021-46795

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.

Score

CVSS 3.1 4.7 Medium

Status

Modified - psirt@amd.com

Published

2023-01-11

Last modified

2025-04-09

Weaknesses

CWE-367

Affected products

• Cezannepi-fp6 Firmware (Amd)
• Comboam4v2 Pi Firmware (Amd)
• Renoirpi-fp6 Firmware (Amd)
• Ryzen 3000 Series (Amd)
• Ryzen 5000 Series (Amd)

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031