What’s Vulnerable › Vulnerabilities

CVE-2021-46757

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-13 · updated 2026-06-17
• Weakness: CWE-119

Description

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation.

Affected products

• AMD Ryzen Embedded 5600E Firmware: before embam4pi_1.0.0.0 — fixed in embam4pi_1.0.0.0
• AMD Ryzen Embedded 5800E Firmware: before embam4pi_1.0.0.0 — fixed in embam4pi_1.0.0.0
• AMD Ryzen Embedded 5900E Firmware: before embam4pi_1.0.0.0 — fixed in embam4pi_1.0.0.0
• AMD Ryzen Embedded 5950E Firmware: before embam4pi_1.0.0.0 — fixed in embam4pi_1.0.0.0
• AMD Ryzen Embedded R2312 Firmware: before embeddedpi-fp6_1.0.0.6 — fixed in embeddedpi-fp6_1.0.0.6
• AMD Ryzen Embedded R2314 Firmware: before embeddedpi-fp6_1.0.0.6 — fixed in embeddedpi-fp6_1.0.0.6
• AMD Ryzen Embedded V2516 Firmware: before embeddedpi-fp6_1.0.0.6 — fixed in embeddedpi-fp6_1.0.0.6
• AMD Ryzen Embedded V2546 Firmware: before embeddedpi-fp6_1.0.0.6 — fixed in embeddedpi-fp6_1.0.0.6
• AMD Ryzen Embedded V2718 Firmware: before embeddedpi-fp6_1.0.0.6 — fixed in embeddedpi-fp6_1.0.0.6
• AMD Ryzen Embedded V2748 Firmware: before embeddedpi-fp6_1.0.0.6 — fixed in embeddedpi-fp6_1.0.0.6

How to fix

Upgrade to a fixed version: AMD Ryzen Embedded 5600E Firmware embam4pi_1.0.0.0; AMD Ryzen Embedded 5800E Firmware embam4pi_1.0.0.0; AMD Ryzen Embedded 5900E Firmware embam4pi_1.0.0.0; AMD Ryzen Embedded 5950E Firmware embam4pi_1.0.0.0; AMD Ryzen Embedded R2312 Firmware embeddedpi-fp6_1.0.0.6; AMD Ryzen Embedded R2314 Firmware embeddedpi-fp6_1.0.0.6; AMD Ryzen Embedded V2516 Firmware embeddedpi-fp6_1.0.0.6; AMD Ryzen Embedded V2546 Firmware embeddedpi-fp6_1.0.0.6; AMD Ryzen Embedded V2718 Firmware embeddedpi-fp6_1.0.0.6; AMD Ryzen Embedded V2748 Firmware embeddedpi-fp6_1.0.0.6. Check the vendor advisory for mitigations.

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001

Get alerted when CVE-2021-46757 or the next vulnerability affects your stack