rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-46756 
Insufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.









Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
Published: 2023-05-09T19:00:35.599Z
CVE-2021-46757 
Insufficient checking of memory buffer in ASP
Secure OS may allow an attacker with a malicious TA to read/write to the ASP
Secure OS kernel virtual address space potentially leading to privilege
escalation.
Affected products: vendor: AMD
product: AMD Ryzen™ Embedded 5000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: unaffected
Published: 2024-02-13T19:23:57.918Z
CVE-2021-46758 
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.









Affected products: vendor: AMD
product: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics  “Cezanne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 7000 Series Desktop Processors “Raphael” XD3
default_status: unaffected
vendor: AMD
product: Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics  “Barcelo”
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”
default_status: unaffected
Published: 2023-11-14T18:54:25.467Z
CVE-2021-46759 
Improper syscall input validation in AMD TEE
(Trusted Execution Environment) may allow an attacker with physical access and
control of a Uapp that runs under the bootloader to reveal the contents of the
ASP (AMD Secure Processor) bootloader accessible memory to a serial port,
resulting in a potential loss of integrity.













Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
Published: 2023-05-09T19:00:53.047Z
CVE-2021-46760 
A malicious or compromised UApp or ABL can send
a malformed system call to the bootloader, which may result in an out-of-bounds
memory access that may potentially lead to an attacker leaking sensitive
information or achieving code execution.





Affected products: vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
Published: 2023-05-09T19:01:05.377Z
CVE-2021-46762 
Insufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially leading to a loss of
integrity or denial of service.
Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™
default_status: unaffected
vendor: AMD
product: AMD EPYC™  Embedded 7002
default_status: unaffected
vendor: AMD
product: AMD EPYC™  Embedded 7003
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 3.9
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L
version: 3.1
Published: 2023-05-09T18:36:23.081Z
CVE-2021-46763 
Insufficient input validation in the SMU may
enable a privileged attacker to write beyond the intended bounds of a shared
memory buffer potentially leading to a loss of integrity.








Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™ 
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ 
default_status: unaffected
Published: 2023-05-09T18:36:23.834Z
CVE-2021-46764 
Improper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory locations within the ASP
potentially resulting in a denial of service.












Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™ 
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ 
default_status: unaffected
Published: 2023-05-09T18:36:24.562Z
CVE-2021-46765 
Insufficient input validation in ASP may allow
an attacker with a compromised SMM to induce out-of-bounds memory reads within
the ASP, potentially leading to a denial of service.





Affected products: vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 6000 Series Mobile Processors  "Rembrandt"
default_status: unaffected
Published: 2023-05-09T19:01:15.823Z
CVE-2021-46766 
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
Affected products: vendor: AMD
product: Ryzen™ Threadripper™ PRO 3000WX Series Processors  “Chagall” WS
default_status: unaffected
vendor: AMD
product: 4th Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 9003
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
version: 3.1
Published: 2023-11-14T18:51:58.036Z
CVE-2021-46767 
Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service.

Problem types: description: n/a
Affected products: vendor:  AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:50.057Z
CVE-2021-46768 
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.

Problem types: description: n/a
Affected products: vendor:  AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:51.443Z
CVE-2021-46769 
Insufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to execute arbitrary DMA copies,
which can lead to code execution. 
















Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™ 
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ 
default_status: unaffected
Published: 2023-05-09T18:36:25.695Z
CVE-2021-46771 
Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2022-05-10T18:30:03.257Z
CVE-2021-46773 
Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.





Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
Published: 2023-05-09T19:01:27.589Z
CVE-2021-46774 
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.
Affected products: vendor: AMD
product: Ryzen™ 3000 series Desktop Processors “Matisse"
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors  “Chagall” WS
default_status: unaffected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 4th Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 3000
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7002
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: unaffected
vendor: AMD
product: AMD Ryzen™  Embedded 5000
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7002
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 3000
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L
version: 3.1
Published: 2023-11-14T18:52:11.012Z
CVE-2021-46775 
Improper input validation in ABL may enable an
attacker with physical access, to perform arbitrary memory overwrites,
potentially leading to a loss of integrity and code execution.



 
















Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™ 
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ 
default_status: unaffected
Published: 2023-05-09T18:36:26.852Z
CVE-2021-46778 
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Processors
Published: 2022-08-09T20:20:12.911Z
CVE-2021-46779 
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.

Problem types: description: n/a
Affected products: vendor: AMD
product: 1st Gen EPYC
default_status: unaffected
vendor:  AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:52.789Z
CVE-2021-46780 Easy Google Maps < 1.9.32 - Reflected Cross-Site Scripting
The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Easy Google Maps
Credits: lang: en
value: 0xB9
Published: 2022-04-25T15:50:49.000Z
CVE-2021-46781 Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site Scripting
The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Coming Soon by Supsystic
Credits: lang: en
value: 0xB9
Published: 2022-04-25T15:50:50.000Z
CVE-2021-46782 Pricing Table by Supsystic < 1.9.5 - Reflected Cross-Site Scripting
The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Pricing Table by Supsystic
Credits: lang: en
value: 0xB9
Published: 2022-04-25T15:50:51.000Z
CVE-2021-46784 
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T00:00:00.000Z
CVE-2021-46785 
The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.
Problem types: description: Improper permission control vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
Published: 2022-05-13T15:01:58.000Z
CVE-2021-46786 
The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
Problem types: description: Out-of-bounds memory access vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
Published: 2022-05-13T15:02:16.000Z
CVE-2021-46787 
The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
Problem types: description: Improper permission control vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-05-13T15:02:34.000Z
CVE-2021-46788 
Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.
Problem types: description: Third-party pop-up window coverage vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-05-13T15:02:51.000Z
CVE-2021-46789 
Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.
Problem types: description: Configuration defectsl vulnerability
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2022-05-13T15:03:07.000Z
CVE-2021-46790 
ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T05:10:09.000Z
CVE-2021-46791 
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.

Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:54.107Z
CVE-2021-46792 
Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.





Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
Published: 2023-05-09T19:01:38.204Z
CVE-2021-46794 
Insufficient bounds checking in ASP (AMD Secure
Processor) may allow for an out of bounds read in SMI (System Management
Interface) mailbox checksum calculation triggering a data abort, resulting in a
potential denial of service.





Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
default_status: unaffected
vendor: AMD
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
default_status: unaffected
Published: 2023-05-09T19:01:47.728Z
CVE-2021-46795 
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.
Problem types: description: n/a
Affected products: vendor:  AMD
product: Ryzen 5000 Series
default_status: affected
vendor:  AMD
product: Ryzen 3000 Series 
default_status: unaffected
Published: 2023-01-10T20:53:25.868Z
CVE-2021-46811 
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.
Problem types: description: Improper permission management vulnerability
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
Published: 2022-06-13T15:06:25.000Z
CVE-2021-46812 
The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.
Problem types: description: Weaknesses Introduced During Design
Affected products: vendor: Huawei
product: HarmonyOS
vendor: Huawei
product: EMUI
Published: 2022-06-13T15:04:08.000Z