CVE-2021-46748

Summary

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.

Impact & exploitability

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

• NVD record
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.htmlAdvisory