Threat Investigation
Request a demo

CVE-2021-46758

Medium

Description

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

SeverityMedium
CVSS6.1
Exploit probability—
ProductAmd Ryzen 7 5700g Firmware
PublishedNov 14, 2023
First seenNov 14, 2023

How to fix

Update
  • amd ryzen_7_5700g_firmwarecomboam4v2_pi_1.2.0.8 or later
  • amd ryzen_7_5700ge_firmwarecomboam4v2_pi_1.2.0.8 or later
  • amd ryzen_5_5600g_firmwarecomboam4v2_pi_1.2.0.8 or later
  • amd ryzen_5_5600ge_firmwarecomboam4v2_pi_1.2.0.8 or later
  • amd ryzen_3_5300g_firmwarecomboam4v2_pi_1.2.0.8 or later
  • amd ryzen_3_5300ge_firmwarecomboam4v2_pi_1.2.0.8 or later
  • amd ryzen_9_7950x3d_firmwarecomboam5_1.0.0.1 or later
  • amd ryzen_9_7900x3d_firmwarecomboam5_1.0.0.1 or later
  • amd ryzen_7_7800x3d_firmwarecomboam5_1.0.0.1 or later
  • amd ryzen_9_4900h_firmwarerenoirpi-fp6_1.0.0.a or later
  • amd ryzen_9_4900hs_firmwarerenoirpi-fp6_1.0.0.a or later
  • amd ryzen_7_4800h_firmwarerenoirpi-fp6_1.0.0.a or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
amd ryzen_7_5700g_firmwarev < comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amd ryzen_7_5700ge_firmwarev < comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amd ryzen_5_5600g_firmwarev < comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amd ryzen_5_5600ge_firmwarev < comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amd ryzen_3_5300g_firmwarev < comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amd ryzen_3_5300ge_firmwarev < comboam4v2_pi_1.2.0.8comboam4v2_pi_1.2.0.8
amd ryzen_9_7950x3d_firmwarev < comboam5_1.0.0.1comboam5_1.0.0.1
amd ryzen_9_7900x3d_firmwarev < comboam5_1.0.0.1comboam5_1.0.0.1
amd ryzen_7_7800x3d_firmwarev < comboam5_1.0.0.1comboam5_1.0.0.1
amd ryzen_9_4900h_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_9_4900hs_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_7_4800h_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_7_4800hs_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_7_4980u_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_7_4800u_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_7_4700u_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_5_4600h_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_5_4600hs_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_5_4680u_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_5_4600u_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_5_4500u_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_3_4300u_firmwarev < renoirpi-fp6_1.0.0.arenoirpi-fp6_1.0.0.a
amd ryzen_7_5700u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_5500u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_3_5300u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_9_5980hx_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_9_5980hs_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_9_5900hx_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_9_5900hs_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_7_5800h_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_7_5800hs_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_7_5825u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_7_5800u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_5600h_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_5600hs_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_5625u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_5600u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_5560u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_5500h_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_3_5425u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_3_5400u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_3_5125c_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_9_6980hx_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_9_6980hs_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_9_6900hx_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_9_6900hs_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_7_6800h_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_7_6800hs_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_7_6800u_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_5_6600h_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_5_6600hs_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_5_6600u_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_7_7735hs_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_7_7736u_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_7_7735u_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_5_7535hs_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_5_7535u_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_3_7335u_firmwarev < rembrandtpi-fp7_1.0.0.5rembrandtpi-fp7_1.0.0.5
amd ryzen_7_pro_7730u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_5_pro_7530u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c
amd ryzen_3_pro_7330u_firmwarev < cezannepi-fp6_1.0.0.ccezannepi-fp6_1.0.0.c

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-46758 · Amd Ryzen 7 5700g Firmware · Dark Radar