CVE-2021-46758

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-14 · updated 2026-06-17

Description

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

Affected products

AMD Ryzen 3 4300U Firmware: before renoirpi-fp6_1.0.0.a — fixed in renoirpi-fp6_1.0.0.a
AMD Ryzen 3 5125C Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 3 5300G Firmware: before comboam4v2_pi_1.2.0.8 — fixed in comboam4v2_pi_1.2.0.8
AMD Ryzen 3 5300Ge Firmware: before comboam4v2_pi_1.2.0.8 — fixed in comboam4v2_pi_1.2.0.8
AMD Ryzen 3 5300U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 3 5400U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 3 5425U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 3 7335U Firmware: before rembrandtpi-fp7_1.0.0.5 — fixed in rembrandtpi-fp7_1.0.0.5
AMD Ryzen 3 Pro 7330U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 4500U Firmware: before renoirpi-fp6_1.0.0.a — fixed in renoirpi-fp6_1.0.0.a
AMD Ryzen 5 4600H Firmware: before renoirpi-fp6_1.0.0.a — fixed in renoirpi-fp6_1.0.0.a
AMD Ryzen 5 4600Hs Firmware: before renoirpi-fp6_1.0.0.a — fixed in renoirpi-fp6_1.0.0.a
AMD Ryzen 5 4600U Firmware: before renoirpi-fp6_1.0.0.a — fixed in renoirpi-fp6_1.0.0.a
AMD Ryzen 5 4680U Firmware: before renoirpi-fp6_1.0.0.a — fixed in renoirpi-fp6_1.0.0.a
AMD Ryzen 5 5500H Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 5500U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 5560U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 5600G Firmware: before comboam4v2_pi_1.2.0.8 — fixed in comboam4v2_pi_1.2.0.8
AMD Ryzen 5 5600Ge Firmware: before comboam4v2_pi_1.2.0.8 — fixed in comboam4v2_pi_1.2.0.8
AMD Ryzen 5 5600H Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 5600Hs Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 5600U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 5625U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 5 6600H Firmware: before rembrandtpi-fp7_1.0.0.5 — fixed in rembrandtpi-fp7_1.0.0.5
AMD Ryzen 5 6600Hs Firmware: before rembrandtpi-fp7_1.0.0.5 — fixed in rembrandtpi-fp7_1.0.0.5
AMD Ryzen 5 6600U Firmware: before rembrandtpi-fp7_1.0.0.5 — fixed in rembrandtpi-fp7_1.0.0.5
AMD Ryzen 5 7535Hs Firmware: before rembrandtpi-fp7_1.0.0.5 — fixed in rembrandtpi-fp7_1.0.0.5
AMD Ryzen 5 7535U Firmware: before rembrandtpi-fp7_1.0.0.5 — fixed in rembrandtpi-fp7_1.0.0.5
AMD Ryzen 5 Pro 7530U Firmware: before cezannepi-fp6_1.0.0.c — fixed in cezannepi-fp6_1.0.0.c
AMD Ryzen 7 4700U Firmware: before renoirpi-fp6_1.0.0.a — fixed in renoirpi-fp6_1.0.0.a

How to fix

Upgrade to a fixed version: AMD Ryzen 3 4300U Firmware renoirpi-fp6_1.0.0.a; AMD Ryzen 3 5125C Firmware cezannepi-fp6_1.0.0.c; AMD Ryzen 3 5300G Firmware comboam4v2_pi_1.2.0.8; AMD Ryzen 3 5300Ge Firmware comboam4v2_pi_1.2.0.8; AMD Ryzen 3 5300U Firmware cezannepi-fp6_1.0.0.c; AMD Ryzen 3 5400U Firmware cezannepi-fp6_1.0.0.c; AMD Ryzen 3 5425U Firmware cezannepi-fp6_1.0.0.c; AMD Ryzen 3 7335U Firmware rembrandtpi-fp7_1.0.0.5; AMD Ryzen 3 Pro 7330U Firmware cezannepi-fp6_1.0.0.c; AMD Ryzen 5 4500U Firmware renoirpi-fp6_1.0.0.a; AMD Ryzen 5 4600H Firmware renoirpi-fp6_1.0.0.a; AMD Ryzen 5 4600Hs Firmware renoirpi-fp6_1.0.0.a. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-46758 or the next vulnerability affects your stack