CVE-2021-46773

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity or code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
AMDRyzen™ 2000 series Desktop Processors “Raven Ridge” AM4various
AMDRyzen™ 2000 Series Desktop Processors “Pinnacle Ridge”various
AMDRyzen™ 3000 Series Desktop Processors “Matisse” AM4various
AMDAMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4various
AMDRyzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4Various
AMD3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDTvarious
AMDRyzen™ Threadripper™ PRO Processors “Castle Peak” WSvarious
AMDRyzen™ Threadripper™ PRO Processors “Chagall” WSvarious
AMDRyzen™ 2000 Series Mobile Processors “Raven Ridge” FP5various
AMDRyzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” various
AMDRyzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”various
AMDRyzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”various

References

Timeline

Published
May 9, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-467747.5Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, poCVE-2021-467756.8Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading toCVE-2021-467785.6Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” CVE-2021-467797.1Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASPCVE-2021-467806.1The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the adminCVE-2021-467816.1The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an atCVE-2021-467826.1The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in CVE-2021-467846.5In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when proCVE-2021-467855.3The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.CVE-2021-467869.8The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerabiliCVE-2021-467877.5The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system applicaCVE-2021-467887.5Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-u