{"id":"CVE-2021-46792","aliases":["EUVD-2021-33448","GHSA-38q7-2qqc-fvvr"],"status":"published","title":"Time-of-check Time-of-use (TOCTOU) in the\nBIOS2PSP command may allow an attacker with a malicious...","description":"Time-of-check Time-of-use (TOCTOU) in the\nBIOS2PSP command may allow an attacker with a malicious BIOS to create a race\ncondition causing the ASP bootloader to perform out-of-bounds SRAM reads upon\nan S3 resume event potentially leading to a denial of service.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00395,"percentile":0.33982,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-367"],"published":"2023-05-09T19:01:38Z","modified":"2026-06-17T04:15:35Z","products":[{"vendor":"amd","product":"athlon_gold_3150g_firmware"},{"vendor":"amd","product":"athlon_gold_3150ge_firmware"},{"vendor":"amd","product":"athlon_silver_3050ge_firmware"},{"vendor":"amd","product":"athlon™ 3000 series mobile processors with radeon™ graphics “dali”/”dali” ulp"},{"vendor":"amd","product":"ryzen_1200_\\(af\\)_firmware"},{"vendor":"amd","product":"ryzen_1600_\\(af\\)_firmware"},{"vendor":"amd","product":"ryzen_2200g_firmware"},{"vendor":"amd","product":"ryzen_2200ge_firmware"},{"vendor":"amd","product":"ryzen_2300x_firmware"},{"vendor":"amd","product":"ryzen_2400g_firmware"},{"vendor":"amd","product":"ryzen_2400ge_firmware"},{"vendor":"amd","product":"ryzen_2500x_firmware"},{"vendor":"amd","product":"ryzen_2600_firmware"},{"vendor":"amd","product":"ryzen_2600e_firmware"},{"vendor":"amd","product":"ryzen_2600x_firmware"},{"vendor":"amd","product":"ryzen_2700_firmware"},{"vendor":"amd","product":"ryzen_2700e_firmware"},{"vendor":"amd","product":"ryzen_2700x_firmware"},{"vendor":"amd","product":"ryzen_2920x_firmware"},{"vendor":"amd","product":"ryzen_2950x_firmware"},{"vendor":"amd","product":"ryzen_2970wx_firmware"},{"vendor":"amd","product":"ryzen_2990wx_firmware"},{"vendor":"amd","product":"ryzen_3100_firmware"},{"vendor":"amd","product":"ryzen_3300x_firmware"},{"vendor":"amd","product":"ryzen_3500_firmware"},{"vendor":"amd","product":"ryzen_3500x_firmware"},{"vendor":"amd","product":"ryzen_3600_firmware"},{"vendor":"amd","product":"ryzen_3600x_firmware"},{"vendor":"amd","product":"ryzen_3600xt_firmware"},{"vendor":"amd","product":"ryzen_3800x_firmware"},{"vendor":"amd","product":"ryzen_3800xt_firmware"},{"vendor":"amd","product":"ryzen_3900_firmware"},{"vendor":"amd","product":"ryzen_3900x_firmware"},{"vendor":"amd","product":"ryzen_3900xt_firmware"},{"vendor":"amd","product":"ryzen_3950x_firmware"},{"vendor":"amd","product":"ryzen_5300g_firmware"},{"vendor":"amd","product":"ryzen_5300ge_firmware"},{"vendor":"amd","product":"ryzen_5500_firmware"},{"vendor":"amd","product":"ryzen_5600_firmware"},{"vendor":"amd","product":"ryzen_5600g_firmware"},{"vendor":"amd","product":"ryzen_5600ge_firmware"},{"vendor":"amd","product":"ryzen_5600x_firmware"},{"vendor":"amd","product":"ryzen_5700g_firmware"},{"vendor":"amd","product":"ryzen_5700ge_firmware"},{"vendor":"amd","product":"ryzen_5700x_firmware"},{"vendor":"amd","product":"ryzen_5800_firmware"},{"vendor":"amd","product":"ryzen_5800x3d_firmware"},{"vendor":"amd","product":"ryzen_5800x_firmware"},{"vendor":"amd","product":"ryzen_5900_firmware"},{"vendor":"amd","product":"ryzen_5900x_firmware"},{"vendor":"amd","product":"ryzen_5945wx_firmware"},{"vendor":"amd","product":"ryzen_5950x_firmware"},{"vendor":"amd","product":"ryzen_5955wx_firmware"},{"vendor":"amd","product":"ryzen_5965wx_firmware"},{"vendor":"amd","product":"ryzen_5975wx_firmware"},{"vendor":"amd","product":"ryzen_5995wx_firmware"},{"vendor":"amd","product":"ryzen™ 2000 series desktop processors “raven ridge” am4"},{"vendor":"amd","product":"ryzen™ 2000 series mobile processors “raven ridge” fp5"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processor, 2nd gen amd ryzen™ mobile processors with radeon™ graphics “picasso”"},{"vendor":"amd","product":"ryzen™ 3000 series mobile processors with radeon™ graphics “renoir”"},{"vendor":"amd","product":"ryzen™ 5000 series desktop processor with radeon™ graphics  “cezanne” am4"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “cezanne”"},{"vendor":"amd","product":"ryzen™ 5000 series mobile processors with radeon™ graphics “lucienne”"}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46792"},{"url":"https://github.com/advisories/GHSA-38q7-2qqc-fvvr"}],"sources":{"cve":[{"id":"CVE-2021-46792","description":"Time-of-check Time-of-use (TOCTOU) in the\nBIOS2PSP command may allow an attacker with a malicious BIOS to create a race\ncondition causing the ASP bootloader to perform out-of-bounds SRAM reads upon\nan S3 resume event potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T19:01:38.204Z","modified":"2025-01-28T15:33:26.98Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:33:02.930115Z"}],"euvd":[{"id":"EUVD-2021-33448","description":"Time-of-check Time-of-use (TOCTOU) in the\nBIOS2PSP command may allow an attacker with a malicious BIOS to create a race\ncondition causing the ASP bootloader to perform out-of-bounds SRAM reads upon\nan S3 resume event potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T19:01:38Z","modified":"2025-01-28T15:33:26Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:11.814906Z"}],"ghsa":[{"id":"GHSA-38q7-2qqc-fvvr","title":"Time-of-check Time-of-use (TOCTOU) in the\nBIOS2PSP command may allow an attacker with a malicious...","description":"Time-of-check Time-of-use (TOCTOU) in the\nBIOS2PSP command may allow an attacker with a malicious BIOS to create a race\ncondition causing the ASP bootloader to perform out-of-bounds SRAM reads upon\nan S3 resume event potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T21:30:23Z","modified":"2024-04-11T21:02:47Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:57:05.919117Z"}],"nvd":[{"id":"CVE-2021-46792","description":"Time-of-check Time-of-use (TOCTOU) in the\nBIOS2PSP command may allow an attacker with a malicious BIOS to create a race\ncondition causing the ASP bootloader to perform out-of-bounds SRAM reads upon\nan S3 resume event potentially leading to a denial of service.\n\n\n\n\n","status":"published","published":"2023-05-09T20:15:12.413Z","modified":"2026-06-17T04:15:35.04Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:07:07.764332Z"}]}}