← Database

CVE-2021-46758

MEDIUM CVSS: 6.1 Published: 2023-11-14 Modified: 2026-06-17

Description

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

Affected Platforms

Amd Ryzen 5 4600H FirmwareAmd Ryzen 9 6900HxAmd Ryzen 3 7335U FirmwareAmd Ryzen 9 5980HxAmd Ryzen 7 5800UAmd Ryzen 5 5625U FirmwareAmd Ryzen 5 5560U FirmwareAmd Ryzen 3 5300GeAmd Ryzen 7 5700UAmd Ryzen 5 7535Hs Firmware

Weakness Type

NVD-CWE-noinfo

References