CVE-2021-46759: amd athlon_gold_3150g_firmware Out-of-bounds Write

Vulnerability summary

CVE-2021-46759 is a medium (CVSS 6.1) Out-of-bounds Write vulnerability in amd athlon_gold_3150g_firmware. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.6% of scored vulnerabilities.

Timeline

1. 09-05-2023
   PublishedVulnerability first disclosed.
2. 27-01-2025
   Last modifiedVulnerability information updated.

Description

Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.