High severity7.8NVD Advisory· Published Feb 13, 2024· Updated Jun 17, 2026
CVE-2021-46757
CVE-2021-46757
Description
Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation.
Affected products
13- cpe:2.3:o:amd:ryzen_embedded_5600e_firmware:*:*:*:*:*:*:*:*Range: <embam4pi_1.0.0.0
- cpe:2.3:o:amd:ryzen_embedded_5800e_firmware:*:*:*:*:*:*:*:*Range: <embam4pi_1.0.0.0
- cpe:2.3:o:amd:ryzen_embedded_5900e_firmware:*:*:*:*:*:*:*:*Range: <embam4pi_1.0.0.0
- cpe:2.3:o:amd:ryzen_embedded_5950e_firmware:*:*:*:*:*:*:*:*Range: <embam4pi_1.0.0.0
- cpe:2.3:o:amd:ryzen_embedded_r2312_firmware:*:*:*:*:*:*:*:*Range: <embeddedpi-fp6_1.0.0.6
- cpe:2.3:o:amd:ryzen_embedded_r2314_firmware:*:*:*:*:*:*:*:*Range: <embeddedpi-fp6_1.0.0.6
- cpe:2.3:o:amd:ryzen_embedded_v2516_firmware:*:*:*:*:*:*:*:*Range: <embeddedpi-fp6_1.0.0.6
- cpe:2.3:o:amd:ryzen_embedded_v2546_firmware:*:*:*:*:*:*:*:*Range: <embeddedpi-fp6_1.0.0.6
- cpe:2.3:o:amd:ryzen_embedded_v2718_firmware:*:*:*:*:*:*:*:*Range: <embeddedpi-fp6_1.0.0.6
- cpe:2.3:o:amd:ryzen_embedded_v2748_firmware:*:*:*:*:*:*:*:*Range: <embeddedpi-fp6_1.0.0.6
- AMD/AMD Ryzen™ Embedded 5000v5Range: various
- AMD/AMD Ryzen™ Embedded V2000v5Range: various
Patches
Vulnerability mechanics
References
1- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001nvdVendor Advisory
News mentions
0No linked articles in our index yet.