Medium severity5.5NVD Advisory· Published Jan 11, 2023· Updated Jun 17, 2026

CVE-2021-46768

Description

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.

Affected products

AMD/Milanpi Firmware
cpe:2.3:o:amd:milanpi_firmware:*:*:*:*:*:*:*:*
Range: <1.0.0.5
AMD/Romepi Firmware
cpe:2.3:o:amd:romepi_firmware:*:*:*:*:*:*:*:*
Range: <1.0.0.d
AMD/SEV firmwarellm-fuzzy
AMD/2nd Gen EPYCv5
Range: various
AMD/3rd Gen EPYCv5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000