CVE-2021-46753: AMD Ryzen™ 2000 series Desktop Processors “Raven

Описание

Оригинално описание

Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.

Засегнати продукти

• AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4: various
• AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4: various
• AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP: various
• AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”: various
• AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5: various
• AMD Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”: various
• AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” : various
• AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”: various
• AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”: various
• AMD Ryzen™ 6000 Series Mobile Processors "Rembrandt": various

История

Други уязвимости в AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4

• CVE-2023-20596
• CVE-2023-20571
• 7.8CVE-2023-20563
• CVE-2022-23821
• CVE-2021-46758

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-46753
• https://nvd.nist.gov/vuln/detail/CVE-2021-46753
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001