9.1

CVE-2021-46754

Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.








Data is provided by the National Vulnerability Database (NVD)
AmdRyzen 5300g Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5300g Version-
AmdRyzen 5300ge Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5300ge Version-
AmdRyzen 5500 Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5500 Version-
AmdRyzen 5600 Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5600 Version-
AmdRyzen 5600g Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5600g Version-
AmdRyzen 5600ge Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5600ge Version-
AmdRyzen 5600x Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5600x Version-
AmdRyzen 5700g Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5700g Version-
AmdRyzen 5700ge Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5700ge Version-
AmdRyzen 5700x Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5700x Version-
AmdRyzen 5800 Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5800 Version-
AmdRyzen 5800x3d Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5800x3d Version-
AmdRyzen 5800x Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5800x Version-
AmdRyzen 5900 Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5900 Version-
AmdRyzen 5900x Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5900x Version-
AmdRyzen 5945wx Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5945wx Version-
AmdRyzen 5950x Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5950x Version-
AmdRyzen 5955wx Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5955wx Version-
AmdRyzen 5965wx Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5965wx Version-
AmdRyzen 5975wx Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5975wx Version-
AmdRyzen 5995wx Firmware Versioncezannepi-fp6_1.0.0.6
   AmdRyzen 5995wx Version-
AmdRyzen 3100 Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3100 Version-
AmdRyzen 3100 Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3100 Version-
AmdRyzen 3100 Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3100 Version-
AmdRyzen 3100 Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3100 Version-
AmdRyzen 3100 Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3100 Version-
AmdRyzen 3300x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3300x Version-
AmdRyzen 3300x Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3300x Version-
AmdRyzen 3300x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3300x Version-
AmdRyzen 3300x Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3300x Version-
AmdRyzen 3300x Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3300x Version-
AmdRyzen 3500 Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3500 Version-
AmdRyzen 3500 Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3500 Version-
AmdRyzen 3500 Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3500 Version-
AmdRyzen 3500 Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3500 Version-
AmdRyzen 3500 Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3500 Version-
AmdRyzen 3500x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3500x Version-
AmdRyzen 3500x Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3500x Version-
AmdRyzen 3500x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3500x Version-
AmdRyzen 3500x Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3500x Version-
AmdRyzen 3500x Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3500x Version-
AmdRyzen 3600 Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3600 Version-
AmdRyzen 3600 Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3600 Version-
AmdRyzen 3600 Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3600 Version-
AmdRyzen 3600 Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3600 Version-
AmdRyzen 3600 Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3600 Version-
AmdRyzen 3600x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3600x Version-
AmdRyzen 3600x Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3600x Version-
AmdRyzen 3600x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3600x Version-
AmdRyzen 3600x Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3600x Version-
AmdRyzen 3600x Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3600x Version-
AmdRyzen 3600xt Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3600xt Version-
AmdRyzen 3600xt Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3600xt Version-
AmdRyzen 3600xt Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3600xt Version-
AmdRyzen 3600xt Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3600xt Version-
AmdRyzen 3600xt Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3600xt Version-
AmdRyzen 3800x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3800x Version-
AmdRyzen 3800x Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3800x Version-
AmdRyzen 3800x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3800x Version-
AmdRyzen 3800x Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3800x Version-
AmdRyzen 3800x Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3800x Version-
AmdRyzen 3800xt Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3800xt Version-
AmdRyzen 3800xt Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3800xt Version-
AmdRyzen 3800xt Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3800xt Version-
AmdRyzen 3800xt Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3800xt Version-
AmdRyzen 3800xt Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3800xt Version-
AmdRyzen 3900 Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3900 Version-
AmdRyzen 3900 Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3900 Version-
AmdRyzen 3900 Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3900 Version-
AmdRyzen 3900 Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3900 Version-
AmdRyzen 3900 Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3900 Version-
AmdRyzen 3900x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3900x Version-
AmdRyzen 3900x Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3900x Version-
AmdRyzen 3900x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3900x Version-
AmdRyzen 3900x Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3900x Version-
AmdRyzen 3900x Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3900x Version-
AmdRyzen 3900xt Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3900xt Version-
AmdRyzen 3900xt Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3900xt Version-
AmdRyzen 3900xt Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3900xt Version-
AmdRyzen 3900xt Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3900xt Version-
AmdRyzen 3900xt Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3900xt Version-
AmdRyzen 3950x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 3950x Version-
AmdRyzen 3950x Firmware Versioncomboam4v2_pi_1.2.0.5
   AmdRyzen 3950x Version-
AmdRyzen 3950x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 3950x Version-
AmdRyzen 3950x Firmware Versionpicassopi-fp5_1.0.0.e
   AmdRyzen 3950x Version-
AmdRyzen 3950x Firmware Versionrenoirpi-fp6_1.0.0.7
   AmdRyzen 3950x Version-
AmdRyzen 1200 (af) Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 1200 (af) Version-
AmdRyzen 1200 (af) Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 1200 (af) Version-
AmdRyzen 1200 (af) Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 1200 (af) Version-
AmdRyzen 1200 (af) Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 1200 (af) Version-
AmdRyzen 1600 (af) Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 1600 (af) Version-
AmdRyzen 1600 (af) Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 1600 (af) Version-
AmdRyzen 1600 (af) Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 1600 (af) Version-
AmdRyzen 1600 (af) Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 1600 (af) Version-
AmdRyzen 2200g Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2200g Version-
AmdRyzen 2200g Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2200g Version-
AmdRyzen 2200g Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2200g Version-
AmdRyzen 2200g Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2200g Version-
AmdRyzen 2200ge Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2200ge Version-
AmdRyzen 2200ge Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2200ge Version-
AmdRyzen 2200ge Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2200ge Version-
AmdRyzen 2200ge Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2200ge Version-
AmdRyzen 2300x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2300x Version-
AmdRyzen 2300x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2300x Version-
AmdRyzen 2300x Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2300x Version-
AmdRyzen 2300x Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2300x Version-
AmdRyzen 2400g Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2400g Version-
AmdRyzen 2400g Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2400g Version-
AmdRyzen 2400g Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2400g Version-
AmdRyzen 2400g Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2400g Version-
AmdRyzen 2400ge Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2400ge Version-
AmdRyzen 2400ge Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2400ge Version-
AmdRyzen 2400ge Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2400ge Version-
AmdRyzen 2400ge Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2400ge Version-
AmdRyzen 2500x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2500x Version-
AmdRyzen 2500x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2500x Version-
AmdRyzen 2500x Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2500x Version-
AmdRyzen 2500x Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2500x Version-
AmdRyzen 2600 Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2600 Version-
AmdRyzen 2600 Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2600 Version-
AmdRyzen 2600 Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2600 Version-
AmdRyzen 2600 Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2600 Version-
AmdRyzen 2600e Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2600e Version-
AmdRyzen 2600e Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2600e Version-
AmdRyzen 2600e Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2600e Version-
AmdRyzen 2600e Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2600e Version-
AmdRyzen 2600x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2600x Version-
AmdRyzen 2600x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2600x Version-
AmdRyzen 2600x Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2600x Version-
AmdRyzen 2600x Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2600x Version-
AmdRyzen 2700 Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2700 Version-
AmdRyzen 2700 Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2700 Version-
AmdRyzen 2700 Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2700 Version-
AmdRyzen 2700 Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2700 Version-
AmdRyzen 2700e Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2700e Version-
AmdRyzen 2700e Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2700e Version-
AmdRyzen 2700e Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2700e Version-
AmdRyzen 2700e Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2700e Version-
AmdRyzen 2700x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2700x Version-
AmdRyzen 2700x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2700x Version-
AmdRyzen 2700x Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2700x Version-
AmdRyzen 2700x Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2700x Version-
AmdRyzen 2920x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2920x Version-
AmdRyzen 2920x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2920x Version-
AmdRyzen 2920x Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2920x Version-
AmdRyzen 2920x Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2920x Version-
AmdRyzen 2950x Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2950x Version-
AmdRyzen 2950x Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2950x Version-
AmdRyzen 2950x Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2950x Version-
AmdRyzen 2950x Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2950x Version-
AmdRyzen 2970wx Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2970wx Version-
AmdRyzen 2970wx Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2970wx Version-
AmdRyzen 2970wx Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2970wx Version-
AmdRyzen 2970wx Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2970wx Version-
AmdRyzen 2990wx Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen 2990wx Version-
AmdRyzen 2990wx Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen 2990wx Version-
AmdRyzen 2990wx Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen 2990wx Version-
AmdRyzen 2990wx Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen 2990wx Version-
AmdRyzen Pro 2100ge Firmware Versioncomboam4pi_1.0.0.9
   AmdRyzen Pro 2100ge Version-
AmdRyzen Pro 2100ge Firmware Versioncomboam4v2_pi_1.2.0.8
   AmdRyzen Pro 2100ge Version-
AmdRyzen Pro 2100ge Firmware Versionpinnaclepi-am4_1.0.0.d
   AmdRyzen Pro 2100ge Version-
AmdRyzen Pro 2100ge Firmware Versionraven-fp5-am4_1.1.0.f
   AmdRyzen Pro 2100ge Version-
AmdAthlon Gold 3150g Firmware Versionpicassopi-fp5_1.0.0.e
   AmdAthlon Gold 3150g Version-
AmdAthlon Gold 3150g Firmware Versionpollockpi-ft5_1.0.0.4
   AmdAthlon Gold 3150g Version-
AmdAthlon Gold 3150ge Firmware Versionpicassopi-fp5_1.0.0.e
   AmdAthlon Gold 3150ge Version-
AmdAthlon Gold 3150ge Firmware Versionpollockpi-ft5_1.0.0.4
   AmdAthlon Gold 3150ge Version-
AmdAthlon Silver 3050ge Firmware Versionpicassopi-fp5_1.0.0.e
   AmdAthlon Silver 3050ge Version-
AmdAthlon Silver 3050ge Firmware Versionpollockpi-ft5_1.0.0.4
   AmdAthlon Silver 3050ge Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.17% 0.389
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.