PT-2023-12578 · Amd · 2Nd Gen Amd Epyc™+41

Published 2023-05-09 · Updated 2025-01-28 · CVE-2021-46764

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves improper validation of DRAM addresses in SMU, which may allow an attacker to overwrite sensitive memory locations within the ASP, potentially resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-46764

Affected Products

2Nd Gen Amd Epyc™

3Rd Gen Amd Epyc™

Epyc 7232P Firmware

Epyc 7252 Firmware

Epyc 7262 Firmware

Epyc 7272 Firmware

Epyc 7282 Firmware

Epyc 72F3 Firmware

Epyc 7302P Firmware

Epyc 7313P Firmware

Epyc 7343 Firmware

Epyc 7352 Firmware

Epyc 7373X Firmware

Epyc 73F3 Firmware

Epyc 7402P Firmware

Epyc 7413 Firmware

Epyc 7443P Firmware

Epyc 7452 Firmware

Epyc 7453 Firmware

Epyc 7473X Firmware

Epyc 74F3 Firmware

Epyc 7502 Firmware

Epyc 7513 Firmware

Epyc 7532 Firmware

Epyc 7542 Firmware

Epyc 7543P Firmware

Epyc 7552 Firmware

Epyc 7573X Firmware

Epyc 75F3 Firmware

Epyc 7642 Firmware

Epyc 7643 Firmware

Epyc 7662 Firmware

Epyc 7663 Firmware

Epyc 7702P Firmware

Epyc 7713P Firmware

Epyc 7742 Firmware

Epyc 7763 Firmware

Epyc 7773X Firmware

Epyc 7F32 Firmware

Epyc 7F52 Firmware

Epyc 7F72 Firmware

Epyc 7H12 Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-46764 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-46764 · Vendor Advisory
• https://t.me/cvenotify/50057 · Telegram Post
• https://t.me/cvenotify/108883 · Telegram Post