CVE-2021-46756 - CVE House
Back to Database
Status published Unknown CVE-2021-46756

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure...

Vulnerability Description

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-46756

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors
Vulnerable Versions:
various , Various , various

Timeline

Official Publish: May 9th, 2023
Last Modified: January 28th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.