← Database

CVE-2021-46759

MEDIUM CVSS: 6.1 Published: 2023-05-09 Modified: 2026-06-17

Description

Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.

Affected Platforms

Amd Ryzen 3600X FirmwareAmd Ryzen 3900Amd Ryzen 5600GAmd Ryzen 5945Wx FirmwareAmd Ryzen 2700 FirmwareAmd Ryzen 3500Amd Ryzen 2970WxAmd Ryzen 2500X FirmwareAmd Ryzen 2400GAmd Ryzen 5900 Firmware

Weakness Type

CWE-787, CWE-787

References