CVE-2021-46748

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
AMDRadeon™ RX 5000/6000/7000 Series Graphics Cardsvarious
AMDRadeon™ PRO W5000/W6000/W7000 Series Graphics Cardsvarious
AMDRadeon™ RX Vega Series Graphics Cardsvarious
AMDRadeon™ PRO WX Vega Series Graphics Cardsvarious

References

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-467497.5Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox CVE-2021-467503.0Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messageCVE-2021-467539.1Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious UapCVE-2021-467549.1Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce thCVE-2021-467557.5Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious CVE-2021-467569.1Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious CVE-2021-467577.8Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel CVE-2021-467586.1Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapCVE-2021-467596.1Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a UapCVE-2021-467609.8A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory accesCVE-2021-467629.1Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of sCVE-2021-467637.5Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer pote
CVE-2021-46748: Medium severity, CVSS 5.5 | Vulnix