{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-05T01:01:56.009","vulnerabilities":[{"cve":{"id":"CVE-2021-46768","sourceIdentifier":"psirt@amd.com","published":"2023-01-11T08:15:13.163","lastModified":"2026-06-17T04:15:30.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.\n"},{"lang":"es","value":"Una validación de entrada insuficiente en el firmware SEV puede permitir que un atacante realice lecturas de memoria fuera de los límites dentro del cargador de arranque ASP, lo que podría provocar una denegación de servicio."}],"affected":[{"source":"psirt@amd.com","affectedData":[{"vendor":" AMD","product":"2nd Gen EPYC","defaultStatus":"unaffected","packageName":"AGESA","platforms":["x86"],"versions":[{"version":"various ","status":"affected"}]},{"vendor":"AMD","product":"3rd Gen EPYC","defaultStatus":"unaffected","packageName":"AGESA","platforms":["x86"],"versions":[{"version":"various ","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T14:49:59.196190Z","id":"CVE-2021-46768","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:amd:romepi_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.d","matchCriteriaId":"88ECFD2A-170F-46B8-9013-4605ED25626F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amd:romepi:-:*:*:*:*:*:*:*","matchCriteriaId":"B936879F-731E-4991-ACBB-16643F629B41"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:amd:milanpi_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.0.5","matchCriteriaId":"46D6FD1B-4833-425D-A39E-2FC0A769C036"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:amd:milanpi:-:*:*:*:*:*:*:*","matchCriteriaId":"1F64A4AA-A66B-4B2E-B8F1-F332E3945903"}]}]}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032","source":"psirt@amd.com","tags":["Vendor Advisory"]},{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}