Approved changes feed: RSS · Atom

cpe:2.3:o:amd:ryzen_3100_firmware:comboam4v2_pi_1.2.0.5:*:*:*:*:*:*:*

part: o version: comboam4v2_pi_1.2.0.5 update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductRyzen 3100 Firmware (2b9f54d7-84d8-596c-90ea-8493c299cf8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-46794 vulnerable 2026-06-08 05:38:05.997551 Details available
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.
Published: 2023-05-09T19:01:47.728Z
Updated: 2025-01-28T15:25:54.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46792 vulnerable 2026-06-08 05:38:05.917140 Details available
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing the ASP bootloader to perform out-of-bounds SRAM reads upon an S3 resume event potentially leading to a denial of service.
Published: 2023-05-09T19:01:38.204Z
Updated: 2025-01-28T15:33:26.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46759 vulnerable 2026-06-08 05:38:04.950478 Details available
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a Uapp that runs under the bootloader to reveal the contents of the ASP (AMD Secure Processor) bootloader accessible memory to a serial port, resulting in a potential loss of integrity.
Published: 2023-05-09T19:00:53.047Z
Updated: 2025-01-27T17:34:38.069Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46754 vulnerable 2026-06-08 05:38:04.538488 Details available
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU (System Management Unit) resulting in a potential loss of confidentiality and integrity.
Published: 2023-05-09T19:00:16.712Z
Updated: 2024-08-04T05:17:42.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46753 vulnerable 2026-06-08 05:38:04.430289 Details available
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.
Published: 2023-05-09T19:00:04.895Z
Updated: 2025-01-28T15:41:07.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46749 vulnerable 2026-06-08 05:38:04.225432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.