{"id":"CVE-2021-46765","aliases":["EUVD-2021-33421","GHSA-vfqw-535x-mpvj"],"status":"published","title":"Insufficient input validation in ASP may allow\nan attacker with a compromised SMM to induce out...","description":"Insufficient input validation in ASP may allow\nan attacker with a compromised SMM to induce out-of-bounds memory reads within\nthe ASP, potentially leading to a denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00616,"percentile":0.5003,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2023-05-09T19:01:15Z","modified":"2026-06-17T04:15:29Z","products":[{"vendor":"amd","product":"ryzen_3100_firmware"},{"vendor":"amd","product":"ryzen_3300x_firmware"},{"vendor":"amd","product":"ryzen_3500_firmware"},{"vendor":"amd","product":"ryzen_3500x_firmware"},{"vendor":"amd","product":"ryzen_3600_firmware"},{"vendor":"amd","product":"ryzen_3600x_firmware"},{"vendor":"amd","product":"ryzen_3600xt_firmware"},{"vendor":"amd","product":"ryzen_3800x_firmware"},{"vendor":"amd","product":"ryzen_3800xt_firmware"},{"vendor":"amd","product":"ryzen_3900_firmware"},{"vendor":"amd","product":"ryzen_3900x_firmware"},{"vendor":"amd","product":"ryzen_3900xt_firmware"},{"vendor":"amd","product":"ryzen_3950x_firmware"},{"vendor":"amd","product":"ryzen_5300g_firmware"},{"vendor":"amd","product":"ryzen_5300ge_firmware"},{"vendor":"amd","product":"ryzen_5500_firmware"},{"vendor":"amd","product":"ryzen_5600_firmware"},{"vendor":"amd","product":"ryzen_5600g_firmware"},{"vendor":"amd","product":"ryzen_5600ge_firmware"},{"vendor":"amd","product":"ryzen_5600x_firmware"},{"vendor":"amd","product":"ryzen_5700g_firmware"},{"vendor":"amd","product":"ryzen_5700ge_firmware"},{"vendor":"amd","product":"ryzen_5700x_firmware"},{"vendor":"amd","product":"ryzen_5800_firmware"},{"vendor":"amd","product":"ryzen_5800x3d_firmware"},{"vendor":"amd","product":"ryzen_5800x_firmware"},{"vendor":"amd","product":"ryzen_5900_firmware"},{"vendor":"amd","product":"ryzen_5900x_firmware"},{"vendor":"amd","product":"ryzen_5945wx_firmware"},{"vendor":"amd","product":"ryzen_5950x_firmware"},{"vendor":"amd","product":"ryzen_5955wx_firmware"},{"vendor":"amd","product":"ryzen_5965wx_firmware"},{"vendor":"amd","product":"ryzen_5975wx_firmware"},{"vendor":"amd","product":"ryzen_5995wx_firmware"},{"vendor":"amd","product":"ryzen_6600h_firmware"},{"vendor":"amd","product":"ryzen_6600hs_firmware"},{"vendor":"amd","product":"ryzen_6600u_firmware"},{"vendor":"amd","product":"ryzen_6800h_firmware"},{"vendor":"amd","product":"ryzen_6800hs_firmware"},{"vendor":"amd","product":"ryzen_6800u_firmware"},{"vendor":"amd","product":"ryzen_6900hs_firmware"},{"vendor":"amd","product":"ryzen_6900hx_firmware"},{"vendor":"amd","product":"ryzen_6980hs_firmware"},{"vendor":"amd","product":"ryzen_6980hx_firmware"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processors with radeon™ graphics “renoir”"},{"vendor":"amd","product":"ryzen™ 5000 series desktop processor with radeon™ graphics  “cezanne” am4"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “cezanne”"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “lucienne”"},{"vendor":"amd","product":"ryzen™ 6000 series mobile processors  \"rembrandt\""}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46765"},{"url":"https://github.com/advisories/GHSA-vfqw-535x-mpvj"}],"sources":{"cve":[{"id":"CVE-2021-46765","description":"Insufficient input validation in ASP may allow\nan attacker with a compromised SMM to induce out-of-bounds memory reads within\nthe ASP, potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T19:01:15.823Z","modified":"2025-01-27T17:27:51.011Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:02.930115Z"}],"euvd":[{"id":"EUVD-2021-33421","description":"Insufficient input validation in ASP may allow\nan attacker with a compromised SMM to induce out-of-bounds memory reads within\nthe ASP, potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T19:01:15Z","modified":"2025-01-27T17:27:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:12.665174Z"}],"ghsa":[{"id":"GHSA-vfqw-535x-mpvj","title":"Insufficient input validation in ASP may allow\nan attacker with a compromised SMM to induce out...","description":"Insufficient input validation in ASP may allow\nan attacker with a compromised SMM to induce out-of-bounds memory reads within\nthe ASP, potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T21:30:23Z","modified":"2024-04-04T03:57:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:56:20.113325Z"}],"nvd":[{"id":"CVE-2021-46765","description":"Insufficient input validation in ASP may allow\nan attacker with a compromised SMM to induce out-of-bounds memory reads within\nthe ASP, potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T20:15:12.327Z","modified":"2026-06-17T04:15:29.633Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:07.764332Z"}]}}