CVE-2021-46759
6.1MEDIUM
Key Information:
- Vendor
- Amd
- Status
- Vendor
- CVE Published:
- 9 May 2023
Summary
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.
Affected Version(s)
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” x86 various
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP x86 various
Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 x86 various
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database