What’s Vulnerable › Vulnerabilities
CVE-2021-46754
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-05-09 · updated 2026-06-17
- Weakness: CWE-20
Description
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Affected products
- AMD Athlon Gold 3150G Firmware: picassopi-fp5_1.0.0.e, pollockpi-ft5_1.0.0.4
- AMD Athlon Gold 3150Ge Firmware: picassopi-fp5_1.0.0.e, pollockpi-ft5_1.0.0.4
- AMD Athlon Silver 3050Ge Firmware: picassopi-fp5_1.0.0.e, pollockpi-ft5_1.0.0.4
- AMD Ryzen 1200 (Af) Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 1600 (Af) Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2200G Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2200Ge Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2300X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2400G Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2400Ge Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2500X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2600 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2600E Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2600X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2700 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2700E Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2700X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2920X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2950X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2970Wx Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2990Wx Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 3100 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3300X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3500 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3500X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3600 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3600X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3600Xt Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3800X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3800Xt Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.7
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
Get alerted when CVE-2021-46754 or the next vulnerability affects your stack