CVE-2021-46756

CVSS V2 None CVSS V3 None

Description

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

Overview

CVE ID
CVE-2021-46756

Assigner
psirt@amd.com

Vulnerability Status
Awaiting Analysis

Published Version
2023-05-09T20:15:12

Last Modified Date
2023-05-09T20:27:45

References

Reference URL	Reference Tags
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2021-46756
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46756

History

Created	Old Value	New Value	Data Type	Notes
2023-05-09 21:02:01				Added to TrackCVE