CVE-2021-46792
Assigner: AMD
Published: 2023-05-09T19:01:38.204Z
State: PUBLISHED
affected: defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
vendor: AMD
versions: status: affected
version: various 
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4
vendor: AMD
versions: status: affected
version: Various 
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
vendor: AMD
versions: status: affected
version: various 
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
vendor: AMD
versions: status: affected
version: various 
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
vendor: AMD
versions: status: affected
version: various 
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” 
vendor: AMD
versions: status: affected
version: various 
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”
vendor: AMD
versions: status: affected
version: various 
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
vendor: AMD
versions: status: affected
version: various 
datePublic: 2023-05-09T16:30:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.



<br>
value: Time-of-check Time-of-use (TOCTOU) in the
BIOS2PSP command may allow an attacker with a malicious BIOS to create a race
condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon
an S3 resume event potentially leading to a denial of service.





source: advisory: AMD-SB-4001
discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev