Medium severity4.7NVD Advisory· Published Jan 11, 2023· Updated Jun 17, 2026

CVE-2021-46795

Description

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.

Affected products

AMD/Cezannepi Fp6 Firmware
cpe:2.3:o:amd:cezannepi-fp6_firmware:*:*:*:*:*:*:*:*
Range: <1.0.0.6
AMD/Comboam4v2 Pi Firmware
cpe:2.3:o:amd:comboam4v2_pi_firmware:*:*:*:*:*:*:*:*
Range: <1.2.0.5
AMD/Renoirpi Fp6 Firmware
cpe:2.3:o:amd:renoirpi-fp6_firmware:*:*:*:*:*:*:*:*
Range: <1.0.0.7
AMD/TEE OSllm-create
AMD/Ryzen 3000 Seriesv5
Range: various
AMD/Ryzen 5000 Seriesv5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000