CVE-2021-46759 - CVE House
Back to Database
Status published Unknown CVE-2021-46759

Improper syscall input validation in AMD TEE (Trusted Execution Environment) may...

Vulnerability Description

Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-46759

Credits & Attribution

No credits recorded in the NVD database.

References

More from AMD

View All →
CVE-2025-66664
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC...
Medium 4.6
CVE-2025-66660
Insufficient parameter sanitization in TEE SOC Driver could allow an...
Low 1.8
CVE-2025-62628
Unsafe OpenSSL initialization within some AMD optional tools may allow...
High 7
CVE-2025-62627
An untrusted pointer dereference in the ionic cloud driver for...
High 7.2
CVE-2025-62626
Improper handling of insufficient entropy in the AMD CPUs could...
High 7.2

Affected Vendor

Affected Software

Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” , Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
Vulnerable Versions:
various

Timeline

Official Publish: May 9th, 2023
Last Modified: January 27th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.