CVE-2021-46774 - CVE House
Back to Database
Status published Medium CVE-2021-46774

Insufficient DRAM address validation in System Management Unit (SMU) may allow...

Vulnerability Description

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-46774

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Ryzen™ 3000 series Desktop Processors “Matisse", AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”, AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD Ryzen™ Embedded 5000
Vulnerable Versions:
various

Timeline

Official Publish: November 14th, 2023
Last Modified: October 11th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.