CVE-2021-46753: amd athlon_gold_3150g_firmware
Vulnerability summary
CVE-2021-46753 is a critical (CVSS 9.1) vulnerability in amd athlon_gold_3150g_firmware. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.5% of scored vulnerabilities.
Timeline
- 09-05-2023PublishedVulnerability first disclosed.
- 28-01-2025Last modifiedVulnerability information updated.
Description
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.56%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
0.00 pp
From 0.56% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Amd76 products
- athlon_gold_3150g_firmwarepicassopi-fp5_1.0.0.e | pollockpi-ft5_1.0.0.4
- athlon_gold_3150ge_firmwarepicassopi-fp5_1.0.0.e | pollockpi-ft5_1.0.0.4
- athlon_silver_3050ge_firmwarepicassopi-fp5_1.0.0.e | pollockpi-ft5_1.0.0.4
- athlon™ 3000 series mobile processors with radeon™ graphics “pollock”various
- athlon™ 3000 series mobile processors with radeon™ graphics “dali”/”dali” ulpvarious
1 vendor · 76 products