What’s Vulnerable › Vulnerabilities
CVE-2021-46792
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-05-09 · updated 2026-06-17
- Weakness: CWE-367
Description
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service.
Affected products
- AMD Athlon Gold 3150G Firmware: picassopi-fp5_1.0.0.4
- AMD Athlon Gold 3150Ge Firmware: picassopi-fp5_1.0.0.4
- AMD Athlon Silver 3050Ge Firmware: picassopi-fp5_1.0.0.4
- AMD Ryzen 1200 (Af) Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 1600 (Af) Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2200G Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2200Ge Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2300X Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2400G Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2400Ge Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2500X Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2600 Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2600E Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2600X Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2700 Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2700E Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2700X Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2920X Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2950X Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2970Wx Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 2990Wx Firmware: pinnaclepi-am4_1.0.0.7, raven-fp5-am4_1.0.0.9
- AMD Ryzen 3100 Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3300X Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3500 Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3500X Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3600 Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3600X Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3600Xt Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3800X Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
- AMD Ryzen 3800Xt Firmware: comboam4v2_pi_1.2.0.5, picasso_pi-fp5_1.0.0.4, renoirpi-fp6_1.0.0.7
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
Get alerted when CVE-2021-46792 or the next vulnerability affects your stack