{"id":"CVE-2021-46773","aliases":["EUVD-2021-33429","GHSA-fpvr-537c-jhg2"],"status":"published","title":"Insufficient input validation in ABL may enable\na privileged attacker to corrupt ASP memory,...","description":"Insufficient input validation in ABL may enable\na privileged attacker to corrupt ASP memory, potentially resulting in a loss of\nintegrity or code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00771,"percentile":0.55915,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2023-05-09T19:01:27Z","modified":"2026-06-17T04:15:31Z","products":[{"vendor":"amd","product":"3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt"},{"vendor":"amd","product":"amd ryzen™ 5000 series desktop processors “vermeer” am4"},{"vendor":"amd","product":"ryzen_1200_\\(af\\)_firmware"},{"vendor":"amd","product":"ryzen_1600_\\(af\\)_firmware"},{"vendor":"amd","product":"ryzen_2200g_firmware"},{"vendor":"amd","product":"ryzen_2200ge_firmware"},{"vendor":"amd","product":"ryzen_2300x_firmware"},{"vendor":"amd","product":"ryzen_2400g_firmware"},{"vendor":"amd","product":"ryzen_2400ge_firmware"},{"vendor":"amd","product":"ryzen_2500x_firmware"},{"vendor":"amd","product":"ryzen_2600_firmware"},{"vendor":"amd","product":"ryzen_2600e_firmware"},{"vendor":"amd","product":"ryzen_2600x_firmware"},{"vendor":"amd","product":"ryzen_2700_firmware"},{"vendor":"amd","product":"ryzen_2700e_firmware"},{"vendor":"amd","product":"ryzen_2700x_firmware"},{"vendor":"amd","product":"ryzen_2920x_firmware"},{"vendor":"amd","product":"ryzen_2950x_firmware"},{"vendor":"amd","product":"ryzen_2970wx_firmware"},{"vendor":"amd","product":"ryzen_2990wx_firmware"},{"vendor":"amd","product":"ryzen_3100_firmware"},{"vendor":"amd","product":"ryzen_3300x_firmware"},{"vendor":"amd","product":"ryzen_3500_firmware"},{"vendor":"amd","product":"ryzen_3500x_firmware"},{"vendor":"amd","product":"ryzen_3600_firmware"},{"vendor":"amd","product":"ryzen_3600x_firmware"},{"vendor":"amd","product":"ryzen_3600xt_firmware"},{"vendor":"amd","product":"ryzen_3800x_firmware"},{"vendor":"amd","product":"ryzen_3800xt_firmware"},{"vendor":"amd","product":"ryzen_3900_firmware"},{"vendor":"amd","product":"ryzen_3900x_firmware"},{"vendor":"amd","product":"ryzen_3900xt_firmware"},{"vendor":"amd","product":"ryzen_3950x_firmware"},{"vendor":"amd","product":"ryzen_5300g_firmware"},{"vendor":"amd","product":"ryzen_5300ge_firmware"},{"vendor":"amd","product":"ryzen_5500_firmware"},{"vendor":"amd","product":"ryzen_5600_firmware"},{"vendor":"amd","product":"ryzen_5600g_firmware"},{"vendor":"amd","product":"ryzen_5600ge_firmware"},{"vendor":"amd","product":"ryzen_5600x_firmware"},{"vendor":"amd","product":"ryzen_5700g_firmware"},{"vendor":"amd","product":"ryzen_5700ge_firmware"},{"vendor":"amd","product":"ryzen_5700x_firmware"},{"vendor":"amd","product":"ryzen_5800_firmware"},{"vendor":"amd","product":"ryzen_5800x3d_firmware"},{"vendor":"amd","product":"ryzen_5800x_firmware"},{"vendor":"amd","product":"ryzen_5900_firmware"},{"vendor":"amd","product":"ryzen_5900x_firmware"},{"vendor":"amd","product":"ryzen_5945wx_firmware"},{"vendor":"amd","product":"ryzen_5950x_firmware"},{"vendor":"amd","product":"ryzen_5955wx_firmware"},{"vendor":"amd","product":"ryzen_5965wx_firmware"},{"vendor":"amd","product":"ryzen_5975wx_firmware"},{"vendor":"amd","product":"ryzen_5995wx_firmware"},{"vendor":"amd","product":"ryzen_6600h_firmware"},{"vendor":"amd","product":"ryzen_6600hs_firmware"},{"vendor":"amd","product":"ryzen_6600u_firmware"},{"vendor":"amd","product":"ryzen_6800h_firmware"},{"vendor":"amd","product":"ryzen_6800hs_firmware"},{"vendor":"amd","product":"ryzen_6800u_firmware"},{"vendor":"amd","product":"ryzen_6900hs_firmware"},{"vendor":"amd","product":"ryzen_6900hx_firmware"},{"vendor":"amd","product":"ryzen_6980hs_firmware"},{"vendor":"amd","product":"ryzen_6980hx_firmware"},{"vendor":"amd","product":"ryzen_pro_2100ge_firmware"},{"vendor":"amd","product":"ryzen™ 2000 series desktop processors “pinnacle ridge”"},{"vendor":"amd","product":"ryzen™ 2000 series desktop processors “raven ridge” am4"},{"vendor":"amd","product":"ryzen™ 2000 series mobile processors “raven ridge” fp5"},{"vendor":"amd","product":"ryzen™ 3000 series desktop processors “matisse” am4"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processors with radeon™ graphics “renoir”"},{"vendor":"amd","product":"ryzen™ 5000 series desktop processor with radeon™ graphics  “cezanne” am4"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “cezanne”"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “lucienne”"},{"vendor":"amd","product":"ryzen™ threadripper™ pro processors “castle peak” ws"},{"vendor":"amd","product":"ryzen™ threadripper™ pro processors “chagall” ws"}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46773"},{"url":"https://github.com/advisories/GHSA-fpvr-537c-jhg2"}],"sources":{"cve":[{"id":"CVE-2021-46773","description":"Insufficient input validation in ABL may enable\na privileged attacker to corrupt ASP memory, potentially resulting in a loss of\nintegrity or code execution.\n\n\n\n\n","status":"published","published":"2023-05-09T19:01:27.589Z","modified":"2025-01-28T15:37:21.733Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:33:03.320536Z"}],"euvd":[{"id":"EUVD-2021-33429","description":"Insufficient input validation in ABL may enable\na privileged attacker to corrupt ASP memory, potentially resulting in a loss of\nintegrity or code execution.\n\n\n\n\n","status":"published","published":"2023-05-09T19:01:27Z","modified":"2025-01-28T15:37:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:11.814906Z"}],"ghsa":[{"id":"GHSA-fpvr-537c-jhg2","title":"Insufficient input validation in ABL may enable\na privileged attacker to corrupt ASP memory,...","description":"Insufficient input validation in ABL may enable\na privileged attacker to corrupt ASP memory, potentially resulting in a loss of\nintegrity or code execution.\n\n\n\n\n","status":"published","published":"2023-05-09T21:30:23Z","modified":"2024-04-04T03:57:50Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:56:20.113325Z"}],"nvd":[{"id":"CVE-2021-46773","description":"Insufficient input validation in ABL may enable\na privileged attacker to corrupt ASP memory, potentially resulting in a loss of\nintegrity or code execution.\n\n\n\n\n","status":"published","published":"2023-05-09T20:15:12.37Z","modified":"2026-06-17T04:15:31.743Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:07.764332Z"}]}}