Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-46757

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation.

Published

2024-02-13T20:15:50.060

Last Modified

2025-05-07T22:15:15.447

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd ryzen_embedded_5950e_firmware < embam4pi_1.0.0.0 Yes
Hardware amd ryzen_embedded_5950e - No
Operating System amd ryzen_embedded_5900e_firmware < embam4pi_1.0.0.0 Yes
Hardware amd ryzen_embedded_5900e - No
Operating System amd ryzen_embedded_5800e_firmware < embam4pi_1.0.0.0 Yes
Hardware amd ryzen_embedded_5800e - No
Operating System amd ryzen_embedded_5600e_firmware < embam4pi_1.0.0.0 Yes
Hardware amd ryzen_embedded_5600e - No
Operating System amd ryzen_embedded_v2516_firmware < embeddedpi-fp6_1.0.0.6 Yes
Hardware amd ryzen_embedded_v2516 - No
Operating System amd ryzen_embedded_v2546_firmware < embeddedpi-fp6_1.0.0.6 Yes
Hardware amd ryzen_embedded_v2546 - No
Operating System amd ryzen_embedded_v2718_firmware < embeddedpi-fp6_1.0.0.6 Yes
Hardware amd ryzen_embedded_v2718 - No
Operating System amd ryzen_embedded_v2748_firmware < embeddedpi-fp6_1.0.0.6 Yes
Hardware amd ryzen_embedded_v2748 - No
Operating System amd ryzen_embedded_r2312_firmware < embeddedpi-fp6_1.0.0.6 Yes
Hardware amd ryzen_embedded_r2312 - No
Operating System amd ryzen_embedded_r2314_firmware < embeddedpi-fp6_1.0.0.6 Yes
Hardware amd ryzen_embedded_r2314 - No
References