CVE-2021-46779

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-467806.1The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the adminCVE-2021-467816.1The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an atCVE-2021-467826.1The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in CVE-2021-467846.5In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when proCVE-2021-467855.3The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.CVE-2021-467869.8The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerabiliCVE-2021-467877.5The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system applicaCVE-2021-467887.5Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-uCVE-2021-467897.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.CVE-2021-467907.8ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck isCVE-2021-467915.5Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binarCVE-2021-467925.9Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing th
CVE-2021-46779: High severity, CVSS 7.1 | Vulnix