CVSS 3.1
6.1 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HCVE-2021-46758
Medium (6.1) in amd. EPSS 0.3% chance of exploitation in the next 30 days.
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:ryzen_3_4300u_firmware
- amd:ryzen_3_5125c_firmware
- amd:ryzen_3_5300g_firmware
- amd:ryzen_3_5300ge_firmware
- amd:ryzen_3_5300u_firmware
- amd:ryzen_3_5400u_firmware
- amd:ryzen_3_5425u_firmware
- amd:ryzen_3_7335u_firmware
- amd:ryzen_3_pro_7330u_firmware
- amd:ryzen_5_4500u_firmware
- amd:ryzen_5_4600h_firmware
- amd:ryzen_5_4600hs_firmware
- amd:ryzen_5_4600u_firmware
- amd:ryzen_5_4680u_firmware
- amd:ryzen_5_5500h_firmware
- amd:ryzen_5_5500u_firmware
- amd:ryzen_5_5560u_firmware
- amd:ryzen_5_5600g_firmware
- amd:ryzen_5_5600ge_firmware
- amd:ryzen_5_5600h_firmware
- amd:ryzen_5_5600hs_firmware
- amd:ryzen_5_5600u_firmware
- amd:ryzen_5_5625u_firmware
- amd:ryzen_5_6600h_firmware
- amd:ryzen_5_6600hs_firmware
- amd:ryzen_5_6600u_firmware
- amd:ryzen_5_7535hs_firmware
- amd:ryzen_5_7535u_firmware
- amd:ryzen_5_pro_7530u_firmware
- amd:ryzen_7_4700u_firmware
- amd:ryzen_7_4800h_firmware
- amd:ryzen_7_4800hs_firmware
- amd:ryzen_7_4800u_firmware
- amd:ryzen_7_4980u_firmware
- amd:ryzen_7_5700g_firmware
- amd:ryzen_7_5700ge_firmware
- amd:ryzen_7_5700u_firmware
- amd:ryzen_7_5800h_firmware
- amd:ryzen_7_5800hs_firmware
- amd:ryzen_7_5800u_firmware
- amd:ryzen_7_5825u_firmware
- amd:ryzen_7_6800h_firmware
- amd:ryzen_7_6800hs_firmware
- amd:ryzen_7_6800u_firmware
- amd:ryzen_7_7735hs_firmware
- amd:ryzen_7_7735u_firmware
- amd:ryzen_7_7736u_firmware
- amd:ryzen_7_7800x3d_firmware
- amd:ryzen_7_pro_7730u_firmware
- amd:ryzen_9_4900h_firmware