Skip to content
CVE PROGRAM SOURCE RECORD3.0 Low

CVE-2021-46750

Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in a

Description

Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to send malformed messages to the graphics mailbox resulting in an overlap of a TMR (Trusted Memory Region) that was previously allocated by the ASP bootloader leading to a potential loss of integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.0.Eunaffected

AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5 1.0.0.Eunaffected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7_0.0.8.0 RC1unaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6 1.0.0.8unaffected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • RembrandtPI-FP7_0.0.8.0 RC1unaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.8unaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6 1.0.0.8unaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2 PI 1.2.0.5unaffected

AMD AMD Ryzen™ Embedded R1000 Series Processors

Default version status: affected

  • EmbeddedPI-FP5_1.2.0.Aunaffected

AMD AMD Ryzen™ Embedded R2000 Series Processors

Default version status: affected

  • EmbeddedR2KPI-FP5_1.0.0.2unaffected

AMD AMD Ryzen™ Embedded V1000 Series Processors

Default version status: affected

  • EmbeddedPI-FP5_1.2.0.Aunaffected

AMD AMD Ryzen™ Embedded V2000 Series Processors

Default version status: affected

  • EmbeddedPI-FP6_1.0.0.6unaffected

AMD AMD Ryzen™ Embedded V3000 Series

Default version status: affected

  • EmbeddedPI-FP7r2_1000unaffected

AMD AMD Radeon™ RX 6000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)unaffected

AMD AMD Radeon™ PRO W6000 Series Graphics Products

Default version status: affected

  • AMD Software: PRO Edition 23.Q4 (23.30.13.03)unaffected

AMD AMD Radeon™ PRO V620 Graphics Products

Default version status: affected

  • Contact your AMD Customer Engineering representativeunaffected

References