PT-2023-12574 · Amd · 3Rd Gen Amd Ryzen™ Threadripper™ Processors “Castle Peak” Hedt+8

Publicado 2023-05-09 · Atualizado 2023-05-22 · CVE-2021-46760

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory access. This could potentially lead to an attacker leaking sensitive information or achieving code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Buffer Overflow

Enumeração de Fraquezas

CWE-770

CWE-119

Identificadores relacionados

CVE-2021-46760

Produtos afetados

3Rd Gen Amd Ryzen™ Threadripper™ Processors “Castle Peak” Hedt

Ryzen™ Threadripper™ Pro Processors “Castle Peak” Ws

Ryzen 3945Wx Firmware

Ryzen 3955Wx Firmware

Ryzen 3960X Firmware

Ryzen 3970X Firmware

Ryzen 3975Wx Firmware

Ryzen 3990X Firmware

Ryzen 3995Wx Firmware

Referências · 6

• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 · Aviso do Fabricante
• https://t.me/cibsecurity/63697 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2021-46760 · Aviso do Fabricante
• https://t.me/cvenotify/50076 · Publicação no Telegram
• https://t.me/cvenotify/50909 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2021-46760 · Nota de Segurança