What’s Vulnerable › Vulnerabilities
CVE-2021-46760
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-05-09 · updated 2026-06-17
- Weakness: CWE-119
Description
A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access that may potentially lead to an attacker leaking sensitive information or achieving code execution.
Affected products
- AMD Ryzen 3945Wx Firmware: castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7
- AMD Ryzen 3955Wx Firmware: castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7
- AMD Ryzen 3960X Firmware: castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7
- AMD Ryzen 3970X Firmware: castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7
- AMD Ryzen 3975Wx Firmware: castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7
- AMD Ryzen 3990X Firmware: castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7
- AMD Ryzen 3995Wx Firmware: castlepeakwspi-swrx8_1.0.0.9, chagallwspi-swrx8_1.0.0.2, castlepeakpi-sp3r3_1.0.0.7
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
Get alerted when CVE-2021-46760 or the next vulnerability affects your stack