CVE-2021-46748

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada intel radeon rx vega m firmware, amd radeon software +4 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.

Rincian

Terbit di NVD

14 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 advisory vendor
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html advisory vendor