{"id":"CVE-2021-46749","aliases":["EUVD-2021-33405","GHSA-mjp5-9f6j-gqpc"],"status":"published","title":"Insufficient bounds checking in ASP (AMD Secure\nProcessor) may allow for an out of bounds read in...","description":"Insufficient bounds checking in ASP (AMD Secure\nProcessor) may allow for an out of bounds read in SMI (System Management\nInterface) mailbox checksum calculation triggering a data abort, resulting in a\npotential denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00616,"percentile":0.49811,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2023-05-09T18:59:39Z","modified":"2026-06-17T04:15:26Z","products":[{"vendor":"amd","product":"3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt"},{"vendor":"amd","product":"amd ryzen™ 5000 series desktop processors “vermeer” am4"},{"vendor":"amd","product":"athlon_gold_3150g_firmware"},{"vendor":"amd","product":"athlon_gold_3150ge_firmware"},{"vendor":"amd","product":"athlon_silver_3050ge_firmware"},{"vendor":"amd","product":"athlon™ 3000 series mobile processors with radeon™ graphics   “pollock”"},{"vendor":"amd","product":"athlon™ 3000 series mobile processors with radeon™ graphics “dali”/”dali” ulp"},{"vendor":"amd","product":"ryzen_1200_\\(af\\)_firmware"},{"vendor":"amd","product":"ryzen_1600_\\(af\\)_firmware"},{"vendor":"amd","product":"ryzen_2200g_firmware"},{"vendor":"amd","product":"ryzen_2200ge_firmware"},{"vendor":"amd","product":"ryzen_2300x_firmware"},{"vendor":"amd","product":"ryzen_2400g_firmware"},{"vendor":"amd","product":"ryzen_2400ge_firmware"},{"vendor":"amd","product":"ryzen_2500x_firmware"},{"vendor":"amd","product":"ryzen_2600_firmware"},{"vendor":"amd","product":"ryzen_2600e_firmware"},{"vendor":"amd","product":"ryzen_2600x_firmware"},{"vendor":"amd","product":"ryzen_2700_firmware"},{"vendor":"amd","product":"ryzen_2700e_firmware"},{"vendor":"amd","product":"ryzen_2700x_firmware"},{"vendor":"amd","product":"ryzen_2920x_firmware"},{"vendor":"amd","product":"ryzen_2950x_firmware"},{"vendor":"amd","product":"ryzen_2970wx_firmware"},{"vendor":"amd","product":"ryzen_2990wx_firmware"},{"vendor":"amd","product":"ryzen_3100_firmware"},{"vendor":"amd","product":"ryzen_3300x_firmware"},{"vendor":"amd","product":"ryzen_3500_firmware"},{"vendor":"amd","product":"ryzen_3500x_firmware"},{"vendor":"amd","product":"ryzen_3600_firmware"},{"vendor":"amd","product":"ryzen_3600x_firmware"},{"vendor":"amd","product":"ryzen_3600xt_firmware"},{"vendor":"amd","product":"ryzen_3800x_firmware"},{"vendor":"amd","product":"ryzen_3800xt_firmware"},{"vendor":"amd","product":"ryzen_3900_firmware"},{"vendor":"amd","product":"ryzen_3900x_firmware"},{"vendor":"amd","product":"ryzen_3900xt_firmware"},{"vendor":"amd","product":"ryzen_3950x_firmware"},{"vendor":"amd","product":"ryzen_5300g_firmware"},{"vendor":"amd","product":"ryzen_5300ge_firmware"},{"vendor":"amd","product":"ryzen_5500_firmware"},{"vendor":"amd","product":"ryzen_5600_firmware"},{"vendor":"amd","product":"ryzen_5600g_firmware"},{"vendor":"amd","product":"ryzen_5600ge_firmware"},{"vendor":"amd","product":"ryzen_5600x_firmware"},{"vendor":"amd","product":"ryzen_5700g_firmware"},{"vendor":"amd","product":"ryzen_5700ge_firmware"},{"vendor":"amd","product":"ryzen_5700x_firmware"},{"vendor":"amd","product":"ryzen_5800_firmware"},{"vendor":"amd","product":"ryzen_5800x3d_firmware"},{"vendor":"amd","product":"ryzen_5800x_firmware"},{"vendor":"amd","product":"ryzen_5900_firmware"},{"vendor":"amd","product":"ryzen_5900x_firmware"},{"vendor":"amd","product":"ryzen_5945wx_firmware"},{"vendor":"amd","product":"ryzen_5950x_firmware"},{"vendor":"amd","product":"ryzen_5955wx_firmware"},{"vendor":"amd","product":"ryzen_5965wx_firmware"},{"vendor":"amd","product":"ryzen_5975wx_firmware"},{"vendor":"amd","product":"ryzen_5995wx_firmware"},{"vendor":"amd","product":"ryzen_pro_2100ge_firmware"},{"vendor":"amd","product":"ryzen™ 2000 series desktop processors “pinnacle ridge”"},{"vendor":"amd","product":"ryzen™ 2000 series mobile processors “raven ridge” fp5"},{"vendor":"amd","product":"ryzen™ 3000 series desktop processors “matisse” am4"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processor, 2nd gen amd ryzen™ mobile processors with radeon™ graphics “picasso”"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processors with radeon™ graphics “renoir”"},{"vendor":"amd","product":"ryzen™ 5000 series desktop processor with radeon™ graphics  “cezanne” am4"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “cezanne”"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “lucienne”"},{"vendor":"amd","product":"ryzen™ threadripper™ pro processors “castle peak” ws"},{"vendor":"amd","product":"ryzen™ threadripper™ pro processors “chagall” ws"}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46749"},{"url":"https://github.com/advisories/GHSA-mjp5-9f6j-gqpc"}],"sources":{"cve":[{"id":"CVE-2021-46749","description":"Insufficient bounds checking in ASP (AMD Secure\nProcessor) may allow for an out of bounds read in SMI (System Management\nInterface) mailbox checksum calculation triggering a data abort, resulting in a\npotential denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T18:59:39.837Z","modified":"2025-01-28T15:42:05.273Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:02.930115Z"}],"euvd":[{"id":"EUVD-2021-33405","description":"Insufficient bounds checking in ASP (AMD Secure\nProcessor) may allow for an out of bounds read in SMI (System Management\nInterface) mailbox checksum calculation triggering a data abort, resulting in a\npotential denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T18:59:39Z","modified":"2025-01-28T15:42:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:11.814906Z"}],"ghsa":[{"id":"GHSA-mjp5-9f6j-gqpc","title":"Insufficient bounds checking in ASP (AMD Secure\nProcessor) may allow for an out of bounds read in...","description":"Insufficient bounds checking in ASP (AMD Secure\nProcessor) may allow for an out of bounds read in SMI (System Management\nInterface) mailbox checksum calculation triggering a data abort, resulting in a\npotential denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T21:30:23Z","modified":"2024-04-04T03:57:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:56:20.113325Z"}],"nvd":[{"id":"CVE-2021-46749","description":"Insufficient bounds checking in ASP (AMD Secure\nProcessor) may allow for an out of bounds read in SMI (System Management\nInterface) mailbox checksum calculation triggering a data abort, resulting in a\npotential denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T19:15:10.997Z","modified":"2026-06-17T04:15:26.02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:07.764332Z"}]}}