CVE-2021-46772
Severity Score
3.9
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
Insufficient input validation in the ABL may allow a privileged
attacker with access to the BIOS menu or UEFI shell to tamper with the
structure headers in SPI ROM causing an out of bounds memory read and write,
potentially resulting in memory corruption or denial of service.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-03-31 CVE Reserved
- 2024-08-13 CVE Published
- 2024-08-14 EPSS Updated
- 2024-11-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-125: Out-of-bounds Read
- CWE-787: Out-of-bounds Write
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html | ||
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html | 2024-08-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| AMD Search vendor "AMD" | AMD Ryzen™ 3000 Series Desktop Processors Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Desktop Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Desktop Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 4000 Series Desktop Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Ryzen™ 4000 Series Desktop Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Ryzen™ 4000 Series Desktop Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Threadripper™ 3000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ 3000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ 3000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 3000 Series Mobile Processor With Radeon™ Graphics Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Mobile Processor With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Mobile Processor With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded R1000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded R1000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded R1000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded R2000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded R2000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded R2000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded 5000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded 5000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded 5000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded V1000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded V1000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded V1000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded V2000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded V2000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded V2000 Series Processors" and version " <= " | en |
Affected
| ||||||