CVE-2021-46754: AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 vulnerability
AMD · Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Vendor fix available · Affected: AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 47% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Affected products13
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- AMD · Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4various
- AMD · Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4various
- AMD · Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULPvarious
- AMD · Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”various
- AMD · Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5various
- AMD · Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”various
- AMD · Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”various
- AMD · Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”various
- AMD · Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”various
- AMD · AMD Ryzen™ Embedded R1000various
- AMD · AMD Ryzen™ Embedded R2000various
- AMD · AMD Ryzen™ Embedded V1000various
- AMD · AMD Ryzen™ Embedded V2000various
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2021-46754 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.