Improper input validation in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4

CISA ADP · SSVC 2.0.3

Exploitation

None

Automatable

Yes

Technical impact

Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

• Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge” VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 VendorAMD Affected various Fixed in — No fix listed CNA
• AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4 VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4 VendorAMD Affected Various Fixed in — No fix listed CNA
• 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax” VendorAMD Affected various Fixed in — No fix listed CNA
• 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS VendorAMD Affected various Fixed in — No fix listed CNA
• Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP VendorAMD Affected various Fixed in — No fix listed CNA
• Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5 VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso” VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” VendorAMD Affected various Fixed in — No fix listed CNA
• Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” VendorAMD Affected various Fixed in — No fix listed CNA
• 1st Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
• 2nd Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
• 3rd Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA

No fixed version listed by the sources yet.

Records fixed by the same vendor advisory or release, as the CNA lists them.

• Advisory · 2023-05-09

  AMD 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors and 16 more products — amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

  16 records · Highest priority Priority MEDIUM · 10 MEDIUM, 6 LOW

  Other records, highest priority first

  • TI-2021-21477 Resource allocation without limits in AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors…Priority MEDIUM 50
  • TI-2021-21470 Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub…Priority MEDIUM 48
  • TI-2021-08189 Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4Priority MEDIUM 42
  Show all 16 records → Advisory →
• Advisory · 2023-05-09

  AMD 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors and 16 more products — amd.com/en/corporate/product-security/bulletin/AMD-SB-3001

  5 records · Highest priority Priority MEDIUM · 1 MEDIUM, 4 LOW

  Other records, highest priority first

  • TI-2021-08223 Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in…Priority LOW 39
  • TI-2021-08183 Time-of-check time-of-use race condition in AMD Ryzen™ 3000 Series Desktop Processors…Priority LOW 35
  • TI-2021-08195 A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader…Priority LOW 24
  Show all 5 records → Advisory →

1. 2026-10-02 Threatist record created from CVE-2021-46756
2. 2026-10-03 Alias added: GHSA-p57x-q6x3-v235
3. 2026-10-20 EPSS moved to the 50th–90th percentile

• TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
• TI-2023-06992 Out-of-bounds write in AMD 1st Gen AMD EPYC™ CVSS 3.1CRITICAL 9.8
• TI-2021-08202 Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce… CVSS 3.1CRITICAL 9.8
• TI-2021-21485 Improper input validation in AMD 2nd Gen AMD EPYC™ CVSS 3.1HIGH 8.8
• TI-2021-21480 Out-of-bounds write in AMD 2nd Gen AMD EPYC™ CVSS 3.1HIGH 7.5
• TI-2023-06996 Out-of-bounds write in AMD 2nd Gen AMD EPYC™ CVSS 3.1HIGH 7.5

• CVE-2021-46756 · CVE Program
• CVE-2021-46756 · NVD
• FIRST EPSS
• GHSA-p57x-q6x3-v235 · GitHub Advisory Database · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences