CVE-2021-46772

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Aug 13, 2024
Source updated: Nov 5, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory corruption or denial of service.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AMD EPYC™ 7002 Series Processors

Vendor: AMD
Product: AMD EPYC™ 7002 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 7002 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RomePI 1.0.0.E	`unaffected`	PI	Unavailable	Unavailable	None listed

AMD EPYC™ 7003 Series Processors

Vendor: AMD
Product: AMD EPYC™ 7003 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ 7003 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MilanPI 1.0.0.9	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processors

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4V2 1.2.0.A	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ComboAM4V2 1.2.0.A	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ 3000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ 3000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ 3000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.6	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Threadripper™ PRO 5000WX Processors

Vendor: AMD
Product: AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Threadripper™ PRO 5000WX Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.6	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
MendocinoPI-FT6 1.0.0.3	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.7	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
RembrandtPI-FP7 1.0.0.7	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics

Vendor: AMD
Product: AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
Platforms: Unknown
Default status: affected

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
CezannePI-FP6 1.0.0.E	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7002 Series Processors

Vendor: AMD
Product: AMD EPYC™ Embedded 7002 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7002 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbRomePI-SP3 1.0.0.8	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD EPYC™ Embedded 7003 Series Processors

Vendor: AMD
Product: AMD EPYC™ Embedded 7003 Series Processors
Platforms: Unknown
Default status: affected

AMD EPYC™ Embedded 7003 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbMilanPI-SP3 1.0.0.5	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded R1000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded R1000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded R1000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded R2000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded R2000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded R2000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded 5000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded 5000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded 5000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V1000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V1000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V1000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V2000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V2000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V2000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
various	`affected`	Unavailable	Unavailable	Unavailable	None listed

AMD Ryzen™ Embedded V3000 Series Processors

Vendor: AMD
Product: AMD Ryzen™ Embedded V3000 Series Processors
Platforms: Unknown
Default status: affected

AMD Ryzen™ Embedded V3000 Series Processors · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
EmbeddedPI-FP7r2 1.0.0.4	`unaffected`	Unavailable	Unavailable	Unavailable	None listed