CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2021-46748
Medium (5.5). EPSS 0.2% chance of exploitation in the next 30 days.
Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:radeon_pro_vega_56_firmware
- amd:radeon_pro_vega_64_firmware
- amd:radeon_rx_vega_56_firmware
- amd:radeon_rx_vega_64_firmware
- amd:radeon_software
- intel:radeon_rx_vega_m_firmware
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html