CVE-2021-46774

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
AMD	Ryzen™ 3000 series Desktop Processors “Matisse"	various
AMD	AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”	various
AMD	AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT	various
AMD	AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3	various
AMD	AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS	various
AMD	1st Gen AMD EPYC™ Processors	various
AMD	2nd Gen AMD EPYC™ Processors	various
AMD	3rd Gen AMD EPYC™ Processors	various
AMD	4th Gen AMD EPYC™ Processors	various
AMD	AMD EPYC™ Embedded 3000	various
AMD	AMD EPYC™ Embedded 7002	various
AMD	AMD EPYC™ Embedded 7003	various
AMD	AMD Ryzen™ Embedded 5000	various
AMD	AMD EPYC™ Embedded 7002	various
AMD	AMD EPYC™ Embedded 3000	various
AMD	AMD EPYC™ Embedded 7003	various

References

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-467756.8Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to CVE-2021-467785.6Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” CVE-2021-467797.1Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP CVE-2021-467806.1The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin CVE-2021-467816.1The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an at CVE-2021-467826.1The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in CVE-2021-467846.5In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when pro CVE-2021-467855.3The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.CVE-2021-467869.8The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerabili CVE-2021-467877.5The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system applica CVE-2021-467887.5Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-u CVE-2021-467897.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.