CVE-2021-46794 Denial of service in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT

High 7.5 Published 9 May 2023 Updated 28 Jan 2025

Insufficient bounds checking in AMD Secure Processor allows an out-of-bounds read causing a data abort and potential denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-46794?

CVE-2021-46794 is a high-severity denial of service vulnerability in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, published on 9 May 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.

Weakness: CWE-125

Which versions are affected by CVE-2021-46794?

It affects 56 products.

Products include Amd Athlon Gold 3150g Firmware, Amd Athlon Gold 3150ge Firmware, Amd Athlon Silver 3050ge Firmware, Amd Ryzen 1200 \(Af\) Firmware, Amd Ryzen 1600 \(Af\) Firmware, Amd Ryzen 2200g Firmware and 50 more.

How do I fix CVE-2021-46794?

No fix has been published for CVE-2021-46794 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2021-46794 being exploited?

There is no known exploitation of CVE-2021-46794 in the wild and no public exploit code.

Sources

Also known as GHSA-42wv-vvv3-qm3v.