CVE-2021-46748

CVE Database · CVE-2021-46748

CVE-2021-46748

· MEDIUMModified

CVSS v3.1

5.5

EPSS

0.21%

Published

Nov 14, 2023

Modified

Feb 13, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-119

Affected Products (126)

intel · radeon_rx_vega_m_firmware (up to 23.10.01.46)vulnerable

intel · core_i5-8305g

intel · core_i7-8705g

intel · core_i7-8706g

intel · core_i7-8709g

intel · nuc_8_enthusiast_nuc8i7hnkqc

intel · nuc_8_enthusiast_nuc8i7hvkva

intel · nuc_8_enthusiast_nuc8i7hvkvaw

intel · nuc_kit_nuc8i7hnk

intel · nuc_kit_nuc8i7hvk

amd · radeon_software (up to 23.7.1)vulnerable

amd · radeon_rx_5300

References (4)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs