CVE-2021-46773: AMD Ryzen™ 2000 series Desktop Processors “Raven

Описание

Оригинално описание

Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.

Засегнати продукти

• AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4: various
• AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”: various
• AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4: various
• AMD AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4: various
• AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4: Various
• AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT: various
• AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS: various
• AMD Ryzen™ Threadripper™ PRO Processors “Chagall” WS: various
• AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5: various
• AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” : various
• AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”: various
• AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”: various

История

Други уязвимости в AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4

• CVE-2023-20596
• CVE-2023-20571
• 7.8CVE-2023-20563
• CVE-2022-23821
• CVE-2021-46758

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-46773
• https://nvd.nist.gov/vuln/detail/CVE-2021-46773
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001