PT-2023-12572 · Amd · Amd Secure Processor

Published 2023-11-14 · Updated 2023-12-28 · CVE-2021-46758

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions AMD Secure Processor (affected versions not specified)

Description The issue is related to insufficient validation of SPI flash addresses in the ASP bootloader, which may allow an attacker to read data in memory mapped beyond SPI flash. This could result in a potential loss of availability and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-46758

Affected Products

Amd Secure Processor

References · 4

• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46758 · Security Note
• https://osv.dev/vulnerability/CVE-2021-46758 · Vendor Advisory
• https://t.me/cvenotify/65488 · Telegram Post