What’s Vulnerable › Vulnerabilities
CVE-2021-46759
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-05-09 · updated 2026-06-17
- Weakness: CWE-787
Description
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.
Affected products
- AMD Athlon Gold 3150G Firmware: picassopi-fp5_1.0.0.e, pollockpi-ft5_1.0.0.4
- AMD Athlon Gold 3150Ge Firmware: picassopi-fp5_1.0.0.e, pollockpi-ft5_1.0.0.4
- AMD Athlon Silver 3050Ge Firmware: picassopi-fp5_1.0.0.e, pollockpi-ft5_1.0.0.4
- AMD Ryzen 1200 (Af) Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 1600 (Af) Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2200G Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2200Ge Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2300X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2400G Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2400Ge Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2500X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2600 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2600E Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2600X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2700 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2700E Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2700X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2920X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2950X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2970Wx Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 2990Wx Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.8, pinnaclepi-am4_1.0.0.d, raven-fp5-am4_1.1.0.f
- AMD Ryzen 3100 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3300X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3500 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3500X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3600 Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3600X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3600Xt Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3800X Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
- AMD Ryzen 3800Xt Firmware: comboam4pi_1.0.0.9, comboam4v2_pi_1.2.0.5, comboam4v2_pi_1.2.0.8, picassopi-fp5_1.0.0.e, renoirpi-fp6_1.0.0.8
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
Get alerted when CVE-2021-46759 or the next vulnerability affects your stack