Strix
26.1K

CVE-2021-46764

HIGHCVSS 7.5/10EPSS 0.63%

Last modified

CVE-2021-46764 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service. . EPSS estimates a 0.63% chance of exploitation in the next 30 days.

Description

Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.63%

45.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AmdEpyc 72f3 Firmwaremilanpi_1.0.0.9
AmdEpyc 7313 Firmwaremilanpi_1.0.0.9
AmdEpyc 7313p Firmwaremilanpi_1.0.0.9
AmdEpyc 7343 Firmwaremilanpi_1.0.0.9
AmdEpyc 7373x Firmwaremilanpi_1.0.0.9
AmdEpyc 73f3 Firmwaremilanpi_1.0.0.9
AmdEpyc 7413 Firmwaremilanpi_1.0.0.9
AmdEpyc 7443 Firmwaremilanpi_1.0.0.9
AmdEpyc 7443p Firmwaremilanpi_1.0.0.9
AmdEpyc 7453 Firmwaremilanpi_1.0.0.9
AmdEpyc 7473x Firmwaremilanpi_1.0.0.9
AmdEpyc 74f3 Firmwaremilanpi_1.0.0.9
AmdEpyc 7513 Firmwaremilanpi_1.0.0.9
AmdEpyc 7543 Firmwaremilanpi_1.0.0.9
AmdEpyc 7543p Firmwaremilanpi_1.0.0.9
AmdEpyc 7573x Firmwaremilanpi_1.0.0.9
AmdEpyc 75f3 Firmwaremilanpi_1.0.0.9
AmdEpyc 7643 Firmwaremilanpi_1.0.0.9
AmdEpyc 7663 Firmwaremilanpi_1.0.0.9
AmdEpyc 7713 Firmwaremilanpi_1.0.0.9
AmdEpyc 7713p Firmwaremilanpi_1.0.0.9
AmdEpyc 7763 Firmwaremilanpi_1.0.0.9
AmdEpyc 7773x Firmwaremilanpi_1.0.0.9
AmdEpyc 7232p Firmwareromepi_1.0.0.e
AmdEpyc 7252 Firmwareromepi_1.0.0.e
AmdEpyc 7262 Firmwareromepi_1.0.0.e
AmdEpyc 7272 Firmwareromepi_1.0.0.e
AmdEpyc 7282 Firmwareromepi_1.0.0.e
AmdEpyc 7302 Firmwareromepi_1.0.0.e
AmdEpyc 7302p Firmwareromepi_1.0.0.e
AmdEpyc 7352 Firmwareromepi_1.0.0.e
AmdEpyc 7402 Firmwareromepi_1.0.0.e
AmdEpyc 7402p Firmwareromepi_1.0.0.e
AmdEpyc 7452 Firmwareromepi_1.0.0.e
AmdEpyc 7502 Firmwareromepi_1.0.0.e
AmdEpyc 7502p Firmwareromepi_1.0.0.e
AmdEpyc 7532 Firmwareromepi_1.0.0.e
AmdEpyc 7542 Firmwareromepi_1.0.0.e
AmdEpyc 7552 Firmwareromepi_1.0.0.e
AmdEpyc 7642 Firmwareromepi_1.0.0.e
AmdEpyc 7662 Firmwareromepi_1.0.0.e
AmdEpyc 7702 Firmwareromepi_1.0.0.e
AmdEpyc 7702p Firmwareromepi_1.0.0.e
AmdEpyc 7742 Firmwareromepi_1.0.0.e
AmdEpyc 7f32 Firmwareromepi_1.0.0.e
AmdEpyc 7f52 Firmwareromepi_1.0.0.e
AmdEpyc 7f72 Firmwareromepi_1.0.0.e
AmdEpyc 7h12 Firmwareromepi_1.0.0.e

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2021-46764?
Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service.
How severe is CVE-2021-46764?
CVE-2021-46764 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.63% probability of exploitation in the next 30 days.
How do I fix CVE-2021-46764?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-46764?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST